The MailPress WordPress plugin up to and including 7.2.1 does not have CSRF checks in various places, which could allow malicious users to make a logged in admin change the settings, purge log files and more via CSRF attacks
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
mailpress project mailpress |