Lucene search
K

10 matches found

RedhatCVE
RedhatCVE
added 2025/12/17 10:3 a.m.5 views

CVE-2025-67948

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in SendPulse SendPulse Email Marketing Newsletter sendpulse-email-marketing-newsletter allows Retrieve Embedded Sensitive Data.This issue affects SendPulse Email Marketing Newsletter: from n/a through = 2.2.1...

4.3CVSS6.9AI score0.00037EPSS
Exploits0References1
NVD
NVD
added 2025/12/16 9:15 a.m.2 views

CVE-2025-67948

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in SendPulse SendPulse Email Marketing Newsletter sendpulse-email-marketing-newsletter allows Retrieve Embedded Sensitive Data.This issue affects SendPulse Email Marketing Newsletter: from n/a through = 2.2.1...

4.3CVSS0.00037EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/16 8:12 a.m.22 views

CVE-2025-67948 WordPress SendPulse Email Marketing Newsletter plugin <= 2.2.1 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in SendPulse SendPulse Email Marketing Newsletter sendpulse-email-marketing-newsletter allows Retrieve Embedded Sensitive Data.This issue affects SendPulse Email Marketing Newsletter: from n/a through = 2.2.1...

4.3CVSS0.00037EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/16 8:12 a.m.1 views

CVE-2025-67948 WordPress SendPulse Email Marketing Newsletter plugin <= 2.2.1 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in SendPulse SendPulse Email Marketing Newsletter sendpulse-email-marketing-newsletter allows Retrieve Embedded Sensitive Data.This issue affects SendPulse Email Marketing Newsletter: from n/a through = 2.2.1...

6.5AI score0.00037EPSS
Exploits0References1
CVE
CVE
added 2025/12/16 8:12 a.m.7 views

CVE-2025-67948

CVE-2025-67948 is a WordPress plugin issue in SendPulse Email Marketing Newsletter (plugin

4.3CVSS6.5AI score0.00037EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.3 views

PT-2025-51433

Name of the Vulnerable Software and Affected Versions SendPulse Email Marketing Newsletter versions n/a through 2.2.1 Description A flaw exists in SendPulse Email Marketing Newsletter that could allow unauthorized retrieval of sensitive data. The issue involves the exposure of sensitive system...

4.3CVSS6.1AI score0.00037EPSS
Exploits0References3
OSV
OSV
added 2025/05/07 3:16 p.m.3 views

CVE-2025-47547

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SendPulse SendPulse Email Marketing Newsletter allows Stored XSS. This issue affects SendPulse Email Marketing Newsletter: from n/a through 2.1.6...

5.4CVSS5.8AI score0.00129EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/05/07 12:0 a.m.1 views

WordPress plugin SendPulse Email Marketing Newsletter 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers. WordPress plugin is an application plugin. A cross-site scripting vulnerability exists ...

6.5CVSS6.5AI score0.00129EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/04 12:0 a.m.2 views

WordPress plugin SendPulse Email Marketing Newsletter 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers. WordPress plugin is an application plugin. A cross-site scripting vulnerability exists ...

6.5CVSS7.9AI score0.00131EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/02/04 12:0 a.m.3 views

PT-2025-4613 · Sendpulse · Sendpulse Email Marketing Newsletter

Name of the Vulnerable Software and Affected Versions: SendPulse Email Marketing Newsletter versions prior to 2.1.5 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means that an attacker can...

6.5CVSS9.1AI score0.00131EPSS
Exploits0References4
Rows per page
Query Builder