Lucene search
+L

CVE-2020-5767

🗓️ 17 Jul 2020 21:22:59Reported by tenableType 
cve
 cve
🔗 web.nvd.nist.gov👁 81 Views🌐 WEB

CVE-2020-5767 Cross-site request forgery in Icegram Email Subscribers & Newsletters Plugin for WordPress v4.4.8

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
attackerkb
ATTACKERKB
CVE-2020-5767
17 Jul 202022:15
attackerkb
cnvd
CNVD
WordPress Email Subscribers & Newsletters Cross-Site Request Forgery Vulnerability (CNVD-2020-44908)
29 Jul 202000:00
cnvd
cvelist
Cvelist
CVE-2020-5767
17 Jul 202021:22
cvelist
euvd
EUVD
EUVD-2020-26926
7 Oct 202500:30
euvd
nvd
NVD
CVE-2020-5767
17 Jul 202022:15
nvd
openvas
OpenVAS
WordPress Email Subscribers Plugin < 4.5.1 Multiple Vulnerabilities
21 Jul 202000:00
openvas
osv
OSV
CVE-2020-5767
17 Jul 202022:15
osv
patchstack
Patchstack
WordPress Email Subscribers & Newsletters plugin <= 4.5.0.1 - Cross-Site Request Forgery (CSRF) vulnerability
17 Jul 202000:00
patchstack
prion
Prion
Cross site request forgery (csrf)
17 Jul 202022:15
prion
redhatcve
RedhatCVE
CVE-2020-5767
22 May 202515:40
redhatcve
Rows per page
NVD
Vulners
[
  {
    "product": "Icegram Email Subscribers & Newsletters Plugin for WordPress",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "4.4.8"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
es_test_emailrequest bodyexample.com/webpage/wp-admin/admin-ajax.phpCSRF vulnerability in WordPress plugin enabling forged email sending via admin-ajax.php with crafted POST dataCWE-352
subjectrequest bodyexample.com/webpage/wp-admin/admin-ajax.phpCSRF vulnerability in WordPress plugin enabling forged email sending via admin-ajax.php with crafted POST dataCWE-352
contentrequest bodyexample.com/webpage/wp-admin/admin-ajax.phpCSRF vulnerability in WordPress plugin enabling forged email sending via admin-ajax.php with crafted POST dataCWE-352
actionrequest bodyexample.com/webpage/wp-admin/admin-ajax.phpCSRF vulnerability in WordPress plugin enabling forged email sending via admin-ajax.php with crafted POST dataCWE-352

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation