CVE-2024-3643
EUVD-2024-3222216.05.2024, 06:15
The Newsletter Popup WordPress plugin through 1.2 does not have CSRF check when deleting list, which could allow attackers to make logged in admins perform such action via a CSRF attack
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| mndpsingh287 | newsletter_popup | 𝑥 ≤ 1.2 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| newsletter_popup_project | newsletter_popup | 𝑥 ≤ 1.2 | ADP |
Common Weakness Enumeration