Cross-Site Request Forgery in GoDaddy Email Marketing Plugin for WordPress
CVE-2016-10903

8.8HIGH

Key Information:

Vendor

Wordpress
Status
Godaddy Email Marketing
Vendor
CVE Published:
21 August 2019

What is CVE-2016-10903?

The GoDaddy Email Marketing Sign-Up Forms plugin for WordPress, prior to version 1.1.3, is susceptible to Cross-Site Request Forgery (CSRF). An attacker can exploit this vulnerability to perform actions on behalf of users without their consent, potentially compromising user data and the integrity of the application.

References

https://wordpress.org/plugins/godaddy-email-marketing-sig...
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.