Unprotected CSRF Vulnerability in ENL Newsletter WordPress Plugin Allows Admins to Be Deleted
CVE-2024-3059

Currently unrated

Key Information:

Vendor: Wordpress
Status: Enl-newsletter
Vendor: CVE Published:; 26 April 2024

What is CVE-2024-3059?

The ENL Newsletter WordPress plugin through 1.0.1 does not have CSRF checks in some places, which could allow attackers to make logged in admins delete arbitrary Campaigns via a CSRF attack

References

https://wpscan.com/vulnerability/e154096d-e9b7-43ba-9a34-...

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 26, 2024

Wordpress

What is CVE-2024-3059?

References

Timeline