64 matches found
CVE-2025-23929: Missing Authorization
Missing Authorization vulnerability in wishfulthemes Email Capture & Lead Generation email-capture-lead-generation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Email Capture & Lead Generation: from n/a through = 1.0.2...
CVE-2023-28421
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Winwar Media WordPress Email Marketing Plugin – WP Email Capture.This issue affects WordPress Email Marketing Plugin – WP Email Capture: from n/a through 3.10...
Code injection
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Winwar Media WordPress Email Marketing Plugin – WP Email Capture.This issue affects WordPress Email Marketing Plugin – WP Email Capture: from n/a through 3.10...
CVE-2023-28421
CVE-2023-28421 affects the WordPress plugin WordPress Email Marketing Plugin – WP Email Capture (versions up to 3.10). The issue is an information disclosure vulnerability that could allow an unauthenticated actor to access sensitive data. Remediation: update to version 3.11 or later. The CVE has...
PT-2023-21708 · WordPress · Wp Email Capture
Name of the Vulnerable Software and Affected Versions: WordPress Email Marketing Plugin – WP Email Capture versions 3.10 and earlier Description: The issue is related to the exposure of sensitive information to an unauthorized actor. This affects the WordPress Email Marketing Plugin – WP Email...
CVE-2023-28421: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Winwar Media WordPress Email Marketing Plugin – WP Email Capture.This issue affects WordPress Email Marketing Plugin – WP Email Capture: from n/a through 3.10...
CVE-2023-23724
Cross-Site Request Forgery CSRF vulnerability in Winwar Media WP Email Capture plugin = 3.9.3 versions...
CVE-2023-23724
Cross-Site Request Forgery CSRF vulnerability in Winwar Media WP Email Capture plugin = 3.9.3 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Winwar Media WP Email Capture plugin = 3.9.3 versions...
CVE-2023-23724 WordPress WordPress Email Marketing Plugin – WP Email Capture Plugin <= 3.9.3 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Winwar Media WP Email Capture plugin = 3.9.3 versions...
CVE-2023-23724
CVE-2023-23724 concerns a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin WP Email Capture by Winwar Media, affected versions are <= 3.9.3. The root cause is CSRF in the plugin’s request handling, enabling unauthorized actions when a logged-in user visits a malicious pa...
CVE-2023-23724
Cross-Site Request Forgery CSRF vulnerability in Winwar Media WP Email Capture plugin = 3.9.3 versions...
WordPress plugin WP Email Capture 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
PT-2023-19163 · Winwar Media · Wp Email Capture
Name of the Vulnerable Software and Affected Versions: Winwar Media WP Email Capture plugin versions = 3.9.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a...
CVE-2023-23724: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Winwar Media WP Email Capture plugin = 3.9.3 versions...
CVE-2023-23723
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Winwar Media WP Email Capture plugin = 3.9.3 versions...
CVE-2023-23723
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Winwar Media WP Email Capture plugin = 3.9.3 versions...
CVE-2023-23723
CVE-2023-23723 describes a stored XSS vulnerability in the WordPress plugin “WP Email Capture” by Winwar Media, affecting versions up to 3.9.3. The underlying issue is insufficient sanitization/escaping of certain settings, enabling an attacker with administrator privileges to trigger stored cros...
CVE-2023-23723
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Winwar Media WP Email Capture plugin = 3.9.3 versions...
WordPress plugin WP Email Capture 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...