117 matches found
Cross site scripting
A vulnerability, which was classified as problematic, has been found in atwellpub Resend Welcome Email Plugin 1.0.1 on WordPress. This issue affects the function sendwelcomeemailurl of the file resend-welcome-email.php. The manipulation leads to cross site scripting. The attack may be initiated...
CVE-2015-10078 atwellpub Resend Welcome Email Plugin resend-welcome-email.php send_welcome_email_url cross site scripting
A vulnerability, which was classified as problematic, has been found in atwellpub Resend Welcome Email Plugin 1.0.1 on WordPress. This issue affects the function sendwelcomeemailurl of the file resend-welcome-email.php. The manipulation leads to cross site scripting. The attack may be initiated...
CVE-2015-10078
The CVE-2015-10078 entry concerns the atwellpub Resend Welcome Email Plugin for WordPress (version 1.0.1). The vulnerability affects the function send_welcome_email_url in the file resend-welcome-email.php, enabling cross-site scripting. It can be triggered remotely. A fix is available in version...
CVE-2015-10078: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, has been found in atwellpub Resend Welcome Email Plugin 1.0.1 on WordPress. This issue affects the function sendwelcomeemailurl of the file resend-welcome-email.php. The manipulation leads to cross site scripting. The attack may be initiated...
PT-2023-10257 · Atwellpub · Atwellpub Resend Welcome Email Plugin
Name of the Vulnerable Software and Affected Versions: atwellpub Resend Welcome Email Plugin version 1.0.1 Description: A problematic issue has been found in the atwellpub Resend Welcome Email Plugin, affecting the send welcome email url function of the file resend-welcome-email.php. This issue...
CVE-2022-42699
Auth. Remote Code Execution vulnerability in Easy WP SMTP plugin = 1.5.1 on WordPress...
WordPress WP-EMail plugin cross-site request forgery vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress WP-EMail plugin versions prior to 2.69.0 are vulnerable to cross-site request forgery, whic...
CVE-2022-1614
The WP-EMail WordPress plugin before 2.69.0 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTEADDR, which makes it possible to bypass IP-based anti-spamming restrictions...
CVE-2022-1630
The WP-EMail WordPress plugin before 2.69.0 does not protect its log deletion functionality with nonce checks, allowing attacker to make a logged in admin delete logs via a CSRF attack...
CVE-2022-1547
The Check & Log Email WordPress plugin before 1.0.6 does not sanitise and escape a parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting...
WordPress plugin cross-site scripting vulnerability (CNVD-2021-102401)
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in the Check ...
Cross site scripting
The Check & Log Email WordPress plugin before 1.0.4 does not escape the d parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting...
WordPress 跨站脚本漏洞
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the WordPress plugin Contact Form Email, which stems from...
WordPress Contact Form Email plugin <= 1.3.24 - Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability discovered by Mohammed Aadhil Ashfaq in WordPress Contact Form Email plugin versions = 1.3.24. Solution Update the WordPress Contact Form Email plugin to the latest available version at least 1.3.25...
CVE-2021-24774
The CVE-2021-24774 entry applies to the WordPress plugin Check & Log Email (before version 1.0.3). The vulnerability is a SQL injection caused by failing to validate/escape the GET parameters order and orderby when viewing logs, allowing manipulation of SQL statements. Affected component: Check &...
WordPress Check & Log Email plugin <= 1.0.2 - Multiple SQL Injection (SQLi) vulnerabilities
Multiple SQL Injection SQLi vulnerabilities were discovered by bl4derunner in WordPress Check & Log Email plugin versions = 1.0.2. Solution Update the WordPress Check & Log Email plugin to the latest available version at least 1.0.3...
CVE-2020-5767
Cross-site request forgery in Icegram Email Subscribers & Newsletters Plugin for WordPress v4.4.8 allows a remote attacker to send forged emails by tricking legitimate users into clicking a crafted link...
CloudBees Jenkins LDAP Email Plugin Password Disclosure Vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Dependency Graph Viewer Plugin is used in...
