Headline

CVE-2021-44777: WordPress Email Tracker plugin <= 5.2.6 - Cross-Site Request Forgery (CSRF) vulnerabilities leading to single or bulk e-mail entries deletion - Patchstack

Cross-Site Request Forgery (CSRF) vulnerabilities leading to single or bulk e-mail entries deletion discovered in Email Tracker WordPress plugin (versions <= 5.2.6).

2 years ago

CVE

Open in Source

#csrf #vulnerability #web

email-tracker

Software

Email Tracker

Vulnerable Versions

<= 5.2.6

Fixed in version

5.2.7

CVE

CVE-2021-44777

References

Credits

Classification

Cross Site Request Forgery (CSRF)

OWASP Top 10

A5: Broken Access Control

Disclosure Date

2021-11-01

CVSS 3.0 score

Are your websites subject to this vulnerability?

Details

Cross-Site Request Forgery (CSRF) vulnerabilities leading to single or bulk e-mail entries deletion discovered by Ex.Mi (Patchstack) in WordPress Email Tracker plugin (versions <= 5.2.6).

Solution

Update the WordPress Email Tracker plugin to the latest available version (at least 5.2.7).

Found a vulnerability that puts your sites at risk?

Found a vulnerability? Help us secure the web and join our community of ethical hackers.

Are you the developer of this software? Hire our researchers for a thorough security audit.