### [CVE-2024-39657](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39657) ![](https://img.shields.io/static/v1?label=Product&message=Sender%20%E2%80%93%20Newsletter%2C%20SMS%20and%20Email%20Marketing%20Automation%20for%20WooCommerce&color=blue) ![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue) ![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-352%20Cross-Site%20Request%20Forgery%20(CSRF)&color=brighgreen) ### Description Cross-Site Request Forgery (CSRF) vulnerability in Sender Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce.This issue affects Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce: from n/a through 2.6.18. ### POC #### Reference No PoCs from references. #### Github - https://github.com/20142995/nuclei-templates