WordPress CM E-Mail Blacklist plugin <= 1.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'black_email' Parameter vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting via 'blackemail' Parameter vulnerability discovered by Phap Nguyen Anh - FIS in WordPress Plugin CM Email Registration Blacklist and Whitelist versions = 1.6.2...

WordPress plugin CM Email Registration Blacklist and Whitelist 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

PT-2025-9424

Name of the Vulnerable Software and Affected Versions CreativeMindsSolutions CM Email Registration Blacklist and Whitelist versions 1.5.5 and earlier Description The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS...

WordPress Name: CM E-Mail Registration Blacklist plugin <= 1.5.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis Patchstack Alliance in WordPress Plugin CM Email Registration Blacklist and Whitelist versions = 1.5.5...

WordPress CM E-Mail Registration Blacklist plugin <= 1.5.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin CM Email Registration Blacklist and Whitelist versions = 1.5.2...

CVE-2024-5167: Cross-Site Request Forgery (CSRF)

The CM Email Registration Blacklist and Whitelist WordPress plugin before 1.4.9 does not have CSRF check when adding or deleting an item from the blacklist or whitelist, which could allow attackers to make a logged in admin add or delete settings from the blacklist or whitelist menu via a CSRF...

WordPress plugin CM Email Registration Blacklist and Whitelist security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exis...