CVE-2024-3058

The ENL Newsletter WordPress plugin through 1.0.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

PT-2024-23507 · WordPress · Enl Newsletter

Name of the Vulnerable Software and Affected Versions: ENL Newsletter WordPress plugin versions 1.0.1 and earlier Description: The issue concerns a lack of CSRF checks in certain areas, potentially allowing attackers to manipulate logged-in administrators into deleting arbitrary campaigns through...

WordPress ENL Newsletter Plugin <= 1.0.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software ENL Newsletter Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-3059 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 02791c397f96 Credits Bob Matyas Required...

CVE-2024-31434 WordPress Newsletter plugin <= 8.0.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Stefano Lissa & The Newsletter Team Newsletter.This issue affects Newsletter: from n/a through 8.0.6...

WordPress Newsletter plugin <= 8.0.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Newsletter versions = 8.0.6...

WordPress Newsletter Plugin <= 8.0.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software Newsletter Type Plugin Vulnerable versions = 8.0.6 Fixed in 8.0.7 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31434 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID b4d0ee5b28fa Credits Dhabaleshwar Das Require...

CVE-2024-31110 WordPress Contact Form 7 Newsletter plugin <= 2.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Katz Web Services, Inc. Contact Form 7 Newsletter allows Reflected XSS.This issue affects Contact Form 7 Newsletter: from n/a through 2.2...

WordPress Plugin Contact Form 7 Newsletter 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

WordPress Contact Form 7 Newsletter plugin <= 2.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin Contact Form 7 Newsletter versions = 2.2...

WordPress Newsletter Plugin <= 8.2.0 is vulnerable to Bypass Vulnerability

Software Newsletter Type Plugin Vulnerable versions = 8.2.0 Fixed in 8.2.1 OWASP Top 10 A6: Security Misconfiguration Classification Bypass Vulnerability CVE CVE-2024-30522 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 3a2b06142955 Credits Mika Required privilege...

The vulnerability of the WordPress content management system’s newsletter plugin allows attackers to perform cross-site scripting attacks.

The vulnerability of the WordPress content management system’s newsletter plugin exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

CVE-2023-47686

Cross-Site Request Forgery CSRF vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin = 2.7.2.2 versions...

CVE-2023-47686

Cross-Site Request Forgery CSRF vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin = 2.7.2.2 versions...

CVE-2023-47686

CVE-2023-47686 is a CSRF vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin for WordPress, affecting versions

CVE-2023-47686 WordPress Arigato Autoresponder and Newsletter Plugin <= 2.7.2.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin = 2.7.2.2 versions...

WordPress Arigato Autoresponder and Newsletter Plugin <= 2.7.2.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Arigato Autoresponder and Newsletter Type Plugin Vulnerable versions = 2.7.2.2 Fixed in 2.7.2.3 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-47686 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 5e04d4b1bfa1...

CVE-2022-46803

Improper Neutralization of Formula Elements in a CSV File vulnerability in Noptin Newsletter Simple Newsletter Plugin – Noptin.This issue affects Simple Newsletter Plugin – Noptin: from n/a through 1.9.5...

CVE-2022-46803

Improper Neutralization of Formula Elements in a CSV File vulnerability in Noptin Newsletter Simple Newsletter Plugin – Noptin.This issue affects Simple Newsletter Plugin – Noptin: from n/a through 1.9.5...

CVE-2022-46803

CVE-2022-46803 affects WordPress Simple Newsletter Plugin – Noptin (vulnerable

WordPress Plugin Simple Newsletter Plugin - Noptin Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Simple Newsletter Plugin -...