Filtered by vendor Speakdigital
Subscriptions
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2022-4267 | 1 Speakdigital | 1 Bulk Delete Users By Email | 2024-11-21 | 6.1 Medium |
| The Bulk Delete Users by Email WordPress plugin through 1.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting | ||||
| CVE-2022-4266 | 1 Speakdigital | 1 Bulk Delete Users By Email | 2024-11-21 | 6.5 Medium |
| The Bulk Delete Users by Email WordPress plugin through 1.2 does not have CSRF check when deleting users, which could allow attackers to make a logged in admin delete non admin users by knowing their email via a CSRF attack | ||||
Page 1 of 1.