Medium severity6.9NVD Advisory· Published May 16, 2024· Updated Jun 17, 2026
CVE-2024-3642
CVE-2024-3642
Description
The Newsletter Popup WordPress plugin through 1.2 does not have CSRF check when deleting subscriber, which could allow attackers to make logged in admins perform such action via a CSRF attack
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/dc44d85f-afe8-4824-95b0-11b9abfb04d8/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.