Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2024-12709

Bulk Me Now <= 2.0 - Message Deletion via CSRF

Description

The Bulk Me Now! WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Bulk Me Now!

Default version status: affected

  • 0 to ≤ 2.0affected

References