PT-2020-9209 · WordPress · Mailpoet

Name of the Vulnerable Software and Affected Versions: MailPoet plugin versions prior to 3.23.2 for WordPress Description: The issue allows remote attackers to inject arbitrary web script or HTML using extra parameters in the URL, which is a Reflective Server-Side XSS. Recommendations: For MailPo...

CVE-2018-20853

An issue was discovered in the MailPoet Newsletters aka wysija-newsletters plugin before 2.8.2 for WordPress. The plugin is vulnerable to SPAM attacks...

CVE-2018-20853

An issue was discovered in the MailPoet Newsletters aka wysija-newsletters plugin before 2.8.2 for WordPress. The plugin is vulnerable to SPAM attacks...

Design/Logic Flaw

An issue was discovered in the MailPoet Newsletters aka wysija-newsletters plugin before 2.8.2 for WordPress. The plugin is vulnerable to SPAM attacks...

CVE-2018-20853

An issue was discovered in the MailPoet Newsletters aka wysija-newsletters plugin before 2.8.2 for WordPress. The plugin is vulnerable to SPAM attacks...

CVE-2018-20853

Technical details for CVE-2018-20853 are not publicly available in the provided documents. Monitor for updates from vendor and security advisories.

MailPoet < 3.23.2 - Reflected Cross-Site Scripting Issue

The MailPoet – emails and newsletters in WordPress WordPress plugin was affected by a Reflected Cross-Site Scripting Issue security vulnerability...

WP Mail Logging <= 1.8.2 - Stored Cross-Site Scripting

The WP Mail Logging by MailPoet WordPress plugin was affected by a Stored Cross-Site Scripting security vulnerability...

Zomato: MailPoet Newsletters <= 2.7.2 - Authenticated Reflected Cross-Site Scripting (XSS)

Hello Team Abstract:- A Cross-Site Scripting vulnerability was found in the MailPoet Newsletters plugin. This issue allows an attacker to perform a wide variety of actions, such as stealing Administrators' session tokens, or performing arbitrary actions on their behalf. In order to exploit this...

WordPress MailPoet Newsletters Plugin <= 2.7.2 - Reflected Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress MailPoet Newsletters Plugin <= 2.7.2 - SQL Injection

Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands. Solution Update the plugin...

WordPress MailPoet Newsletters 2.7.2 Cross Site Scripting

------------------------------------------------------------------------ Reflected Cross-Site Scripting vulnerability in MailPoet Newsletters plugin ------------------------------------------------------------------------ Sipke Mellema, July 2016...

WordPress MailPoet Newsletter Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL.MailPoet Newsletters is a newsletter plugin for WordPress that supports the creation of newsletters and the automation of notifications and responses. A cross-sit...

Zomato: Remote File Upload Vulnerability in business-blog.zomato.com

hi https://business-blog.zomato.com installed an outdated MailPoet Plugin which vulnerable to Remote File Upload Vulnerability in WordPress MailPoet Plugin wysija-newsletters related article: https://blog.sucuri.net/2014/07/remote-file-upload-vulnerability-on-mailpoet-wysija-newsletters.html...

MailPoet Newsletters 2.6.19 Cross Site Scripting

Information -------------------- Advisory by Netsparker Name: XSS Vulnerability in MailPoet Newsletters Affected Software : MailPoet Newsletters Affected Versions: v2.6.19 and possibly below Vendor Homepage : http://www.mailpoet.com/ Vulnerability Type : Cross-site Scripting Severity : Important...

WordPress MailPoet Newsletters Plugin <= 2.6.19 - Cross Site Scripting

This plugin is prone to reflected cross site scripting vulnerability. It allows attackers to inject arbitrary JavaScript or HTML code. Solution Update the plugin...

CSRF, XSS Vulnerabilities Afflict Wordpress Plugins

A smattering of bugs, mostly cross-site scripting XSS and cross-site request forgery CSRF vulnerabilities, have been plaguing at least eight different WordPress plugins as of late. A security researcher going by the pseudonym Voxel@Night published on Monday information regarding the...

WordPress MailPoet Newsletters File Upload

File upload vulnerability in WordPress MailPoet Newsletters wysija-newsletters Plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

CVE-2014-3907

Cross-site request forgery CSRF vulnerability in the MailPoet Newsletters wysija-newsletters plugin before 2.6.11 for WordPress allows remote attackers to hijack the authentication of arbitrary users...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the MailPoet Newsletters wysija-newsletters plugin before 2.6.11 for WordPress allows remote attackers to hijack the authentication of arbitrary users...