Description
The WP Opt-in WordPress plugin through 1.4.1 is vulnerable to CSRF which allows changed plugin settings and can be used for sending spam emails.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WP Opt-in | 1.4.1 – ≤ 1.4.1 | — |
Unscored
CVE-2022-2123
EUVD-2022-34409GHSA-j6cw-cm6w-q2vr
WP Opt-in <= 1.4.1 - Arbitrary Settings Update via CSRF
Published Jul 11, 2022 · Updated Aug 3, 2024 · Assigned by WPScan