CVE-2024-43287

The Brevo plugin for WordPress through version 3.1.82 contains a cross-site request forgery vulnerability in the process_bulk_action() function caused by inadequate nonce verification. An unauthenticated attacker could exploit this flaw to execute bulk operations on forms if they successfully deceive a site administrator into clicking a malicious link. The vulnerability affects the plugin's form management capabilities and requires administrator-level interaction to be exploited.

Based on public CVE data (MITRE/NVD).