EnvíaloSimple <= 2.4 - Cross-Site Request Forgery

2024-01-0400:00:00

wpscan.com

envíalosimple

csrf

checks

attackers

manipulate

logged-in users

AI Score

7.1

Confidence

High

EPSS

Percentile

9.0%

JSON

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

References

patchstack.com/database/vulnerability/envialosimple-email-marketing-y-newsletters-gratis/wordpress-envialosimple-plugin-2-1-cross-site-request-forgery-csrf-vulnerability