PT-2024-27567 · Noptin · Noptin

Name of the Vulnerable Software and Affected Versions: Noptin versions through 3.4.2 Description: The issue is related to a Missing Authorization vulnerability in Noptin Newsletter, where functionality is not properly constrained by ACLs, allowing unauthorized access. Recommendations: For version...

CVE-2024-49621

Cross-Site Request Forgery CSRF vulnerability in Apa APA Register Newsletter Form allows SQL Injection.This issue affects APA Register Newsletter Form: from n/a through 1.0.0...

CVE-2024-49621

Cross-Site Request Forgery CSRF vulnerability in aatmaadhikari APA Register Newsletter Form apa-register-newsletter-form allows SQL Injection.This issue affects APA Register Newsletter Form: from n/a through = 1.0.0...

CVE-2024-49621 WordPress APA Register Newsletter Form plugin <= 1.0.0 - CSRF to SQL Injection vulnerability

Cross-Site Request Forgery CSRF vulnerability in aatmaadhikari APA Register Newsletter Form apa-register-newsletter-form allows SQL Injection.This issue affects APA Register Newsletter Form: from n/a through = 1.0.0...

CVE-2024-49621 WordPress APA Register Newsletter Form plugin <= 1.0.0 - CSRF to SQL Injection vulnerability

Cross-Site Request Forgery CSRF vulnerability in Apa APA Register Newsletter Form allows SQL Injection.This issue affects APA Register Newsletter Form: from n/a through 1.0.0...

CVE-2024-49621

CVE-2024-49621 : Apache Register Newsletter Form plugin for WordPress (

PT-2024-33576 · Unknown · Apa Register Newsletter Form

Name of the Vulnerable Software and Affected Versions: APA Register Newsletter Form versions n/a through 1.0.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows SQL Injection in the APA Register Newsletter Form. This means an attacker can trick a user into...

WordPress plugin APA Register Newsletter Form 跨站请求伪造漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

WordPress APA Register Newsletter Form plugin <= 1.0.0 - CSRF to SQL Injection vulnerability

CSRF to SQL Injection vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin APA Register Newsletter Form versions = 1.0.0...

WordPress APA Register Newsletter Form Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software APA Register Newsletter Form Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Request Forgery CSRF CVE CVE-2024-49621 Patch priority Low CVSS severity Low 8.2 Developer Claim ownership PSID 167103aaee5c Credits João Pedro S Alcânta...

What I’ve learned in my first 7-ish years in cybersecurity

When I first interviewed with Joel Esler for my position at Cisco Talos, I remember when the time came for me to ask questions, one thing stood out. I asked what resources were available to me to learn about cybersecurity, because I was totally new to the space. His answer: The people. When I ask...

WordPress plugin Newsletter, SMTP, Email marketing and Subscribe forms by Brevo 安全漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress plugin...

PT-2024-39043 · Brevo · The Newsletter

Name of the Vulnerable Software and Affected Versions: The Newsletter, SMTP, Email marketing and Subscribe forms by Brevo plugin for WordPress versions up to, and including, 3.1.87 Description: The issue is due to missing or incorrect nonce validation on the Init function, making it possible for...

WordPress Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue Plugin <= 3.1.87 is vulnerable to Cross Site Request Forgery (CSRF)

Software Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue Type Plugin Vulnerable versions = 3.1.87 Fixed in 3.1.88 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-8477 Patch priority Low CVSS severity Low 4.3 Developer Claim...

CVE-2024-44012

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in wpdev33 WP Newsletter Subscription wp-newsletter-subscription allows PHP Local File Inclusion.This issue affects WP Newsletter Subscription: from n/a through = 1.1...

CVE-2024-44012 WordPress WP Newsletter Subscription plugin <= 1.1 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in wpdev33 WP Newsletter Subscription wp-newsletter-subscription allows PHP Local File Inclusion.This issue affects WP Newsletter Subscription: from n/a through = 1.1...

CVE-2024-44012 WordPress WP Newsletter Subscription plugin <= 1.1 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in wpdev33 WP Newsletter Subscription wp-newsletter-subscription allows PHP Local File Inclusion.This issue affects WP Newsletter Subscription: from n/a through = 1.1...

CVE-2024-44012

CVE-2024-44012 is a Local File Inclusion (path traversal) vulnerability in the WP Newsletter Subscription plugin for WordPress, affecting versions n/a through 1.1. The issue stems from improper restriction of pathnames, enabling PHP Local File Inclusion. Public sources in connected docs confirm t...

WordPress plugin WP Newsletter Subscription 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

CVE-2024-8254 Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.34 - Authenticated (Subscriber+) Arbitrary Shortcode Execution

The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.7.34. This is due to the software allowing users to execute an action that do...