WordPress Newsletter Plugin <= 8.2.0 is vulnerable to Bypass Vulnerability

Software Newsletter Type Plugin Vulnerable versions = 8.2.0 Fixed in 8.2.1 OWASP Top 10 A6: Security Misconfiguration Classification Bypass Vulnerability CVE CVE-2024-30522 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 3a2b06142955 Credits Mika Required privilege...

The vulnerability of the WordPress content management system’s newsletter plugin allows attackers to perform cross-site scripting attacks.

The vulnerability of the WordPress content management system’s newsletter plugin exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

CVE-2023-47686

Cross-Site Request Forgery CSRF vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin = 2.7.2.2 versions...

CVE-2023-47686

Cross-Site Request Forgery CSRF vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin = 2.7.2.2 versions...

CVE-2023-47686 WordPress Arigato Autoresponder and Newsletter Plugin <= 2.7.2.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin = 2.7.2.2 versions...

CVE-2023-47686

CVE-2023-47686 is a CSRF vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin for WordPress, affecting versions

CVE-2023-47686: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin = 2.7.2.2 versions...

WordPress Arigato Autoresponder and Newsletter Plugin <= 2.7.2.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Arigato Autoresponder and Newsletter Type Plugin Vulnerable versions = 2.7.2.2 Fixed in 2.7.2.3 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-47686 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 5e04d4b1bfa1...

CVE-2022-46803

Improper Neutralization of Formula Elements in a CSV File vulnerability in Noptin Newsletter Simple Newsletter Plugin – Noptin.This issue affects Simple Newsletter Plugin – Noptin: from n/a through 1.9.5...

CVE-2022-46803

Improper Neutralization of Formula Elements in a CSV File vulnerability in Noptin Newsletter Simple Newsletter Plugin – Noptin.This issue affects Simple Newsletter Plugin – Noptin: from n/a through 1.9.5...

CVE-2022-46803

CVE-2022-46803 affects WordPress Simple Newsletter Plugin – Noptin (vulnerable

CVE-2022-46803: Improper Neutralization of Formula Elements in a CSV File

Improper Neutralization of Formula Elements in a CSV File vulnerability in Noptin Newsletter Simple Newsletter Plugin – Noptin.This issue affects Simple Newsletter Plugin – Noptin: from n/a through 1.9.5...

WordPress Plugin Simple Newsletter Plugin - Noptin Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Simple Newsletter Plugin -...

PT-2023-15047 · Unknown · Simple Newsletter Plugin – Noptin

Name of the Vulnerable Software and Affected Versions: Simple Newsletter Plugin – Noptin versions 1.9.5 and earlier Description: The issue is related to the improper neutralization of formula elements in a CSV file, which affects the Simple Newsletter Plugin – Noptin. Recommendations: For version...

CVE-2023-45829 WordPress Newsletter & Bulk Email Sender Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in HappyBox Newsletter & Bulk Email Sender – Email Newsletter Plugin for WordPress plugin = 2.0.1 versions...

CVE-2023-45829

CVE-2023-45829 is a Stored XSS in the HappyBox Newsletter & Bulk Email Sender WordPress plugin (versions ≤ 2.0.1). Authenticated users with contributor+ permissions can exploit input handling that does not properly validate/escape parameters, enabling stored script execution. Impact per sources i...

CVE-2023-45829: Improper Neutralization of Input During Web Page Generation

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in HappyBox Newsletter & Bulk Email Sender – Email Newsletter Plugin for WordPress plugin = 2.0.1 versions...

CVE-2023-4772

The Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'newsletterform' shortcode in versions up to, and including, 7.8.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers wi...

Cross site scripting

The Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'newsletterform' shortcode in versions up to, and including, 7.8.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers wi...

CVE-2023-4772

CVE-2023-4772 affects the WordPress Newsletter plugin (newsletter) up to version 7.8.9, where stored XSS is caused by insufficient input sanitization and output escaping on attributes in the newsletter_form shortcode. The vulnerability allows authenticated contributors (and above) to inject scrip...