CM Email Registration Blacklist and Whitelist, CVE-2024-5167

CVE, Research URL: CVE-2024-5167
Home page URL: Security reports for CM Email Registration Blacklist and Whitelist
Application: CM Email Registration Blacklist and Whitelist
Published on: Jul 13, 2024
Research Description: The CM Email Registration Blacklist and Whitelist WordPress plugin before 1.4.9 does not have CSRF check when adding or deleting an item from the blacklist or whitelist, which could allow attackers to make a logged in admin add or delete settings from the blacklist or whitelist menu via a CSRF attack
Affected versions: max 1.4.9.
Status: vulnerable