Medium · 5.4 CVE-2021-44777 EUVD-2021-31582GHSA-jhr2-2f55-c4fq

WordPress Email Tracker plugin <= 5.2.6 - Cross-Site Request Forgery (CSRF) vulnerabilities leading to single or bulk e-mail entries deletion

Published Jan 19, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Prashant Baldha Product: Email Tracker (WordPress plugin) Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerabilities leading to single or bulk e-mail entries deletion discovered in Email Tracker WordPress plugin (versions <= 5.2.6).

Affected products

Vendor	Product	Affected	Fixed
Prashant Baldha	Email Tracker (WordPress plugin)	<= 5.2.6 – ≤ 5.2.6	—

References

https://wordpress.org/plugins/email-tracker/#developers
https://patchstack.com/database/vulnerability/email-tracker/wordpress-email-tracker-plugin-5-2-6-cross-site-request-forgery-csrf-vulnerabilities-leading-to-single-or-bulk-e-mail-entries-deletion