EIP-2026-113612

This exploit demonstrates a CSRF vulnerability in the Bulk Delete Users by Email WordPress plugin, allowing an attacker to trick an administrator into deleting user accounts by submitting a crafted POST request.