Sanu P.L

**Name of the Vulnerable Software and Affected Versions** The LetterPress WordPress plugin versions 1.2.2 and earlier **Description** The issue is related to the lack of CSRF checks in some areas, allowing attackers to perform unwanted actions on logged-in users via CSRF attacks, such as deleting arbitrary subscribers. **Recommendations** For The LetterPress WordPress plugin versions 1.2.2 and earlier, update to a version that includes CSRF checks to prevent unwanted actions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.