Vulnerabilities (CVE)

Filtered by vendor Email Users Project Subscribe
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-1605 1 Email Users Project 1 Email Users 2024-02-28 4.3 MEDIUM 6.5 MEDIUM
The Email Users WordPress plugin through 4.8.8 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and change the notification settings of arbitrary users