1711 matches found
Sql injection
The freshmail-newsletter plugin before 1.6 for WordPress has shortcode.php SQL Injection via the 'FMform id=' substring...
CVE-2015-9496
The freshmail-newsletter plugin before 1.6 for WordPress has shortcode.php SQL Injection via the 'FMform id=' substring...
CVE-2019-16698
The directmail aka Direct Mail extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user with restricted permissions to the feusers table to view and export data of frontend users who are subscribed to a newsletter...
CVE-2019-16698
The directmail aka Direct Mail extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user with restricted permissions to the feusers table to view and export data of frontend users who are subscribed to a newsletter...
Shopify: Reflective Cross-site Scripting via Newsletter Form
.myshopify.com is vulnerable to a reflective cross-site scripting attack in the newsletter form. This can be crafted to trigger on a page load without any further user interaction. The following example url shows this vulnerability:...
WordPress email-newsletter SQL Injection Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. email-newsletter is an email newsletter plugin used in it. A SQL injection vulnerability exists in WordPress email-newsletter. The...
CVE-2015-9334
The email-newsletter plugin through 20.15 for WordPress has SQL injection...
Sql injection
The email-newsletter plugin through 20.15 for WordPress has SQL injection...
CVE-2015-9334
The email-newsletter plugin through 20.15 for WordPress has SQL injection...
WordPress eelv-newsletter plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. eelv-newsletter is a contact form management plugin used in it. A cross-site scripting vulnerability exists in the WordPress...
WordPress eelv-newsletter plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. eelv-newsletter is a contact form management plugin used in it. A cross-site request forgery vulnerability exists in the WordPress...
CVE-2017-18523
The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book...
CVE-2017-18522
The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book...
CVE-2017-18522
The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book...
CVE-2017-18523
The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book...
Design/Logic Flaw
The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book...
Cross site request forgery (csrf)
The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book...
CVE-2017-18523
The CVE-2017-18523 entry applies to the WordPress eelv-newsletter plugin: versions before 4.6.1 are affected by a CSRF in the address book. The vulnerability allows CSRF-enabled actions without sufficient user interaction, potentially enabling unintended requests. Public references in connected d...