WordPress Plugin Vulnerabilities

MailOptin < 1.2.50.0 - Unauthenticated Campaign Cache Deletion

Description

The plugin does not have authorisation an CSRF checks when deleting campaign cache, which could allow any unauthenticated users to delete it (either directly or via a CSRF attack)

Affects Plugins

Fixed in 1.2.50.0

References

Classification

Type
NO AUTHORISATION
CWE

Miscellaneous

Original Researcher
Muhammad Daffa
Verified
No

Timeline

Publicly Published
2022-09-23 (about 3 years ago)
Added
2022-09-25 (about 3 years ago)
Last Updated
2022-09-25 (about 3 years ago)

Other