CVEs (2)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Speakdigital 1Bulk Delete Users By Email Jun 17, 2026 Dec 26, 2022 N/A· v4 6.1 MEDIUM· v3 N/A· v2 The Bulk Delete Users by Email WordPress plugin through 1.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting |
1Speakdigital 1Bulk Delete Users By Email Jun 17, 2026 Dec 26, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 The Bulk Delete Users by Email WordPress plugin through 1.2 does not have CSRF check when deleting users, which could allow attackers to make a logged in admin delete non admin users by knowing their email via a CSRF att...Show more |