Description (CNA)
The WP-EMail WordPress plugin before 2.69.0 does not protect its log deletion functionality with nonce checks, allowing attacker to make a logged in admin delete logs via a CSRF attack
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / WP-EMail | affected 2.69.0 before 2.69.0 |
CWE
CWE-352
References
ADP enrichment
No English description supplied.