CVE-2024-12709: Bulk Me Now <= 2.0 - Message Deletion via CSRF
Description
The Bulk Me Now! WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks.
Classification
CVE ID: CVE-2024-12709
Affected Products
Vendor: Unknown
Product: Bulk Me Now!
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.77% (scored less or equal to compared to others)
EPSS Date: 2025-02-28 (when was this score calculated)