Unscored CVE-2014-3907 EUVD-2014-3844GHSA-p2r5-83hf-qcmc

Cross-site request forgery (CSRF) vulnerability in the MailPoet Newsletters (wysija-newsletters) plugin before 2.6.11 for WordPress allows …

Published Aug 26, 2014 · Updated Aug 6, 2024 · Assigned by jpcert

Description

Cross-site request forgery (CSRF) vulnerability in the MailPoet Newsletters (wysija-newsletters) plugin before 2.6.11 for WordPress allows remote attackers to hijack the authentication of arbitrary users.

References

http://wordpress.org/plugins/wysija-newsletters/changelog/
JVNDB-2014-000101 third-party-advisory
JVN#94409737 third-party-advisory