CVE-2019-16698

The directmail aka Direct Mail extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user with restricted permissions to the feusers table to view and export data of frontend users who are subscribed to a newsletter...

CVE-2019-16698

The directmail aka Direct Mail extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user with restricted permissions to the feusers table to view and export data of frontend users who are subscribed to a newsletter...

Shopify: Reflective Cross-site Scripting via Newsletter Form

.myshopify.com is vulnerable to a reflective cross-site scripting attack in the newsletter form. This can be crafted to trigger on a page load without any further user interaction. The following example url shows this vulnerability:...

WordPress email-newsletter SQL Injection Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. email-newsletter is an email newsletter plugin used in it. A SQL injection vulnerability exists in WordPress email-newsletter. The...

CVE-2015-9334

The email-newsletter plugin through 20.15 for WordPress has SQL injection...

Sql injection

The email-newsletter plugin through 20.15 for WordPress has SQL injection...

CVE-2015-9334

The email-newsletter plugin through 20.15 for WordPress has SQL injection...

WordPress eelv-newsletter plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. eelv-newsletter is a contact form management plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

WordPress eelv-newsletter plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. eelv-newsletter is a contact form management plugin used in it. A cross-site request forgery vulnerability exists in the WordPress...

CVE-2017-18522

The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book...

CVE-2017-18523

The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book...

CVE-2017-18522

The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book...

CVE-2017-18523

The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book...

Design/Logic Flaw

The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book...

Cross site request forgery (csrf)

The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book...

CVE-2017-18523

The CVE-2017-18523 entry applies to the WordPress eelv-newsletter plugin: versions before 4.6.1 are affected by a CSRF in the address book. The vulnerability allows CSRF-enabled actions without sufficient user interaction, potentially enabling unintended requests. Public references in connected d...

CVE-2017-18523

The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book...

CVE-2017-18522

The CVE-2017-18522 entry concerns the eelv-newsletter WordPress plugin, prior to version 4.6.1. The vulnerability is an XSS flaw in the plugin’s address book, as described by multiple sources (including NVD and CNVD). Impact details in the documents indicate client-side code execution could be po...

CVE-2017-18522

The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book...

WordPress newsletter-by-supsystic plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. newsletter-by-supsystic is a newsletter form plugin used in it. A cross-site request forgery vulnerability exists in the WordPress...