Lucene search
+L

62 matches found

Cvelist
Cvelist
•added 2026/05/20 1:25 a.m.•69 views

CVE-2026-3985 Creative Mail – Easier WordPress & WooCommerce Email Marketing <= 1.6.9 - Unauthenticated SQL Injection via 'checkout_uuid' Parameter

The Creative Mail – Easier WordPress & WooCommerce Email Marketing plugin for WordPress is vulnerable to SQL Injection via the 'checkoutuuid' parameter in all versions up to, and including, 1.6.9. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparati...

7.5CVSS0.00505EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/05/20 1:25 a.m.•30 views

EUVD-2026-31018

The Creative Mail – Easier WordPress & WooCommerce Email Marketing plugin for WordPress is vulnerable to SQL Injection via the 'checkoutuuid' parameter in all versions up to, and including, 1.6.9. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparati...

7.5CVSS5.9AI score0.00505EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/05/20 1:25 a.m.•24 views

CVE-2026-3985

The Creative Mail – Easier WordPress & WooCommerce Email Marketing plugin for WordPress is vulnerable to SQL Injection via the 'checkoutuuid' parameter in all versions up to, and including, 1.6.9. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparati...

7.5CVSS5.9AI score0.00505EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/05/20 12:00 a.m.•30 views

WordPress plugin Creative Mail – Easy WordPress & WooCommerce Email Marketing SQL Injection Vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

7.5CVSS5.8AI score0.00505EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/20 12:00 a.m.•9 views

CVE-2026-3985: Improper Neutralization of Special Elements used in an SQL Command

The Creative Mail – Easier WordPress & WooCommerce Email Marketing plugin for WordPress is vulnerable to SQL Injection via the 'checkoutuuid' parameter in all versions up to, and including, 1.6.9. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparati...

7.5CVSS5.7AI score0.00505EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2022-43957

Malicious code in bioql PyPI...

8.8CVSS8.4AI score0.00287EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•32 views

EUVD-2022-43958

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.00757EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2022-47672

Malicious code in bioql PyPI...

8.8CVSS8.4AI score0.00306EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2023/03/27 12:00 a.m.•62 views

WordPress Creative Mail Plugin < 1.6.0 Multiple CSRF Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:constantcontact:creativemail"; if description...

8.8CVSS7.3AI score0.00757EPSS
SaveExploits0References3
CNVD
CNVD
•added 2022/11/23 12:00 a.m.•84 views

WordPress Creative Mail Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Creative Mail 1.5.4 and earlier versions contain a cross-site request forgery vulnerability...

3.1AI score0.00757EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2022/11/18 11:15 p.m.•29 views

CVE-2022-44740

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Creative Mail plugin = 1.5.4 on WordPress...

8.8CVSS0.00306EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/11/18 11:15 p.m.•19 views

CVE-2022-44740

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Creative Mail plugin = 1.5.4 on WordPress...

8.8CVSS5.8AI score0.00306EPSS
SaveExploits0References2
Prion
Prion
•added 2022/11/18 11:15 p.m.•26 views

Cross site request forgery (csrf)

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Creative Mail plugin = 1.5.4 on WordPress...

6.8CVSS8.9AI score0.00306EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2022/11/18 10:03 p.m.•84 views

CVE-2022-44740

The CVE-2022-44740 entry affects the WordPress Creative Mail plugin versions up to 1.5.4. The connected sources describe multiple Cross-Site Request Forgery (CSRF) vulnerabilities in this plugin, enabling attackers to trigger unwanted actions when a logged-in user interacts with the site. Reporte...

8.8CVSS7.4AI score0.00306EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/11/18 10:03 p.m.•37 views

CVE-2022-44740 WordPress Creative Mail plugin <= 1.5.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Creative Mail plugin = 1.5.4 on WordPress...

5.4CVSS9.2AI score0.00306EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2022/11/18 10:03 p.m.•12 views

CVE-2022-44740 WordPress Creative Mail plugin <= 1.5.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Creative Mail plugin = 1.5.4 on WordPress...

5.4CVSS7.4AI score0.00306EPSS
SaveExploits0References2
NVD
NVD
•added 2022/11/18 7:15 p.m.•31 views

CVE-2022-40686

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

8.8CVSS0.00287EPSS
SaveExploits0References1
NVD
NVD
•added 2022/11/18 7:15 p.m.•51 views

CVE-2022-40687

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

8.8CVSS0.00757EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/11/18 7:15 p.m.•17 views

CVE-2022-40686

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

8.8CVSS5.8AI score0.00287EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/11/18 7:15 p.m.•26 views

CVE-2022-40687

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

8.8CVSS5.8AI score0.00757EPSS
SaveExploits0References1
Rows per page
Query Builder