WordPress Plugin Vulnerabilities

Easy Forms for MailChimp 5.0.3 - classes/class.yksemeBase.php Multiple Actions CSRF

Description

The Easy Forms for Mailchimp WordPress plugin was affected by a classes/class.yksemeBase.php Multiple Actions CSRF security vulnerability.

Affects Plugins

Plugin icon
yikes-inc-easy-mailchimp-extender
Fixed in 5.0.4

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Submitter
pvdl
Verified
Yes
WPVDB ID
24f2f554-7b4c-4012-bb87-f5b763bac747

Timeline

Publicly Published
2014-09-18 (about 9 years ago)
Added
2014-09-18 (about 9 years ago)
Last Updated
2019-07-01 (about 4 years ago)

Other

Published
Title
Published
2023-01-27
Title
JS Help Desk < 2.7.2 - CSRF
Published
2022-09-29
Title
AdminPad < 2.2 - Note Update via CSRF
Published
2023-09-29
Title
Contact Form < 2.0.12 - Form Styling Update via CSRF
Published
2019-02-23
Title
Peters Login Redirect <= 2.9.1 - Multiple CSRF
Published
2023-10-26
Title
EasyRecipe <= 3.5.3251 - Cross-Site Request Forgery