Show filters
46 Total Results
Displaying 41-46 of 46
Sort by:
Attacker Value
Unknown
CVE-2016-10962
Disclosure Date: September 16, 2019 (last updated January 11, 2024)
The icegram plugin before 1.9.19 for WordPress has CSRF via the wp-admin/edit.php option_name parameter.
0
Attacker Value
Unknown
CVE-2019-15830
Disclosure Date: August 30, 2019 (last updated January 11, 2024)
The icegram plugin before 1.10.29 for WordPress has ig_cat_list XSS.
0
Attacker Value
Unknown
CVE-2019-14364
Disclosure Date: July 28, 2019 (last updated November 08, 2023)
An XSS vulnerability in the "Email Subscribers & Newsletters" plugin 4.1.6 for WordPress allows an attacker to inject malicious JavaScript code through a publicly available subscription form using the esfpx_name wp-admin/admin-ajax.php POST parameter.
0
Attacker Value
Unknown
CVE-2019-13569
Disclosure Date: July 19, 2019 (last updated November 27, 2024)
A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system.
0
Attacker Value
Unknown
CVE-2019-19985
Disclosure Date: February 28, 2019 (last updated November 27, 2024)
The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file download with user information disclosure.
0
Attacker Value
Unknown
CVE-2018-6015
Disclosure Date: January 26, 2018 (last updated November 26, 2024)
An issue was discovered in the "Email Subscribers & Newsletters" plugin before 3.4.8 for WordPress. Sending an HTTP POST request to a URI with /?es=export at the end, and adding option=view_all_subscribers in the body, allows downloading of a CSV data file with all subscriber data.
0
