Description
WordPress Plugin Bloom eMail Opt-In is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently modify plugin settings. WordPress Plugin Bloom eMail Opt-In version 1.1 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.1.1 or latest
References
http://www.pritect.net/blog/elegant-themes-security-vulnerability
http://wptavern.com/critical-security-vulnerability-discovered-in-elegant-themes-products
http://us7.campaign-archive2.com/?u=9ae7aa91c578052b052b864d6&id=85b5d27651
Related Vulnerabilities
WordPress Plugin PixCodes Cross-Site Scripting (2.3.6)
IBM WebSEAL Other Vulnerability (CVE-2023-30998)
Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-4614)
IBM WebSEAL URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-4153)
Sqlite Integer Overflow or Wraparound Vulnerability (CVE-2020-13434)