CVE-2023-41730

Summary

CVE-2023-41730 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the SendPress Newsletters plugin versions 1.22.3.31 and below. An attacker can exploit this flaw to execute malicious actions on behalf of a vulnerable user, potentially leading to unauthorized plugin settings modifications. The CSRF vulnerability stems from insufficient input validation and lack of CSRF tokens in certain plugin functions. Users are urged to update to the latest plugin version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.