Show filters
194 Total Results
Displaying 121-130 of 194
Sort by:
Attacker Value
Unknown
CVE-2015-9334
Disclosure Date: August 22, 2019 (last updated November 27, 2024)
The email-newsletter plugin through 20.15 for WordPress has SQL injection.
0
Attacker Value
Unknown
CVE-2018-20987
Disclosure Date: August 22, 2019 (last updated November 27, 2024)
The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection.
0
Attacker Value
Unknown
CVE-2017-18522
Disclosure Date: August 20, 2019 (last updated November 27, 2024)
The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book.
0
Attacker Value
Unknown
CVE-2017-18523
Disclosure Date: August 20, 2019 (last updated November 27, 2024)
The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book.
0
Attacker Value
Unknown
CVE-2019-14788
Disclosure Date: August 15, 2019 (last updated November 27, 2024)
wp-admin/admin-ajax.php?action=newsletters_exportmultiple in the Tribulant Newsletters plugin before 4.6.19 for WordPress allows directory traversal with resultant remote PHP code execution via the subscribers[1][1] parameter in conjunction with an exportfile=../ value.
0
Attacker Value
Unknown
CVE-2017-18512
Disclosure Date: August 14, 2019 (last updated November 27, 2024)
The newsletter-by-supsystic plugin before 1.1.8 for WordPress has CSRF.
0
Attacker Value
Unknown
CVE-2019-14787
Disclosure Date: August 09, 2019 (last updated November 27, 2024)
The Tribulant Newsletters plugin before 4.6.19 for WordPress allows XSS via the wp-admin/admin-ajax.php?action=newsletters_load_new_editor contentarea parameter.
0
Attacker Value
Unknown
CVE-2019-14364
Disclosure Date: July 28, 2019 (last updated November 08, 2023)
An XSS vulnerability in the "Email Subscribers & Newsletters" plugin 4.1.6 for WordPress allows an attacker to inject malicious JavaScript code through a publicly available subscription form using the esfpx_name wp-admin/admin-ajax.php POST parameter.
0
Attacker Value
Unknown
CVE-2019-13569
Disclosure Date: July 19, 2019 (last updated November 27, 2024)
A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system.
0
Attacker Value
Unknown
CVE-2019-19985
Disclosure Date: February 28, 2019 (last updated November 27, 2024)
The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file download with user information disclosure.
0
