title: Bulk Delete Users by Email <= 1.2 - User Deletion via CSRF
description: The Bulk Delete Users by Email WordPress plugin through 1.2 does not have CSRF check when deleting users, which could allow attackers to make a logged in admin delete non admin users by knowing their email via a CSRF attack
problem types: CWE-352 Cross-Site Request Forgery (CSRF)
affected:
{
vendor: Unknown
product: Bulk Delete Users by Email
versions:
status: affected, versionType: custom, version: 0, lessThanOrEqual: 1.2
defaultStatus: affected
collectionURL: https://wordpress.org/plugins
}