2359 matches found
WordPress Email Subscribers & Newsletters plugin <= 4.1.6 - Cross-Site Scripting (XSS) vulnerability
Cross-Site Scripting XSS vulnerability found by ivoschyk-cs in WordPress Email Subscribers & Newsletters plugin versions = 4.1.6. Solution Update the WordPress Email Subscribers & Newsletters plugin to the latest available version at least 4.1.7...
WordPress Email Subscribers Plugin < 4.1.7 XSS Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.112620";...
CVE-2019-14695
A SQL injection vulnerability exists in the Sygnoos Popup Builder plugin before 3.45 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via com/libs/Table.php because Subscribers Table ordering is...
PT-2019-13789 · Sygnoos · Sygnoos Popup Builder
Name of the Vulnerable Software and Affected Versions: Sygnoos Popup Builder plugin versions prior to 3.45 Description: A SQL injection issue exists due to the mishandling of Subscribers Table ordering in com/libs/Table.php, allowing a remote attacker to execute arbitrary SQL commands on the...
WordPress Email Subscribers&Newsletters Plugin Cross-Site Scripting Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Email Subscribers&Newsletters is one of the plug-ins used to push news and information. A cross-site scripting vulnerability exists in...
CVE-2019-14364
An XSS vulnerability in the "Email Subscribers & Newsletters" plugin 4.1.6 for WordPress allows an attacker to inject malicious JavaScript code through a publicly available subscription form using the esfpxname wp-admin/admin-ajax.php POST parameter...
CVE-2019-14364
An XSS vulnerability in the "Email Subscribers & Newsletters" plugin 4.1.6 for WordPress allows an attacker to inject malicious JavaScript code through a publicly available subscription form using the esfpxname wp-admin/admin-ajax.php POST parameter...
Cross site scripting
An XSS vulnerability in the "Email Subscribers & Newsletters" plugin 4.1.6 for WordPress allows an attacker to inject malicious JavaScript code through a publicly available subscription form using the esfpxname wp-admin/admin-ajax.php POST parameter...
CVE-2019-14364
The CVE-2019-14364 entry describes a Cross-Site Scripting (XSS) vulnerability in the WordPress Email Subscribers & Newsletters plugin version 4.1.6. The issue arises from a malicious input via the esfpx_name parameter on the wp-admin/admin-ajax.php endpoint, exposed through a publicly accessible ...
PT-2019-13643 · WordPress · Email Subscribers & Newsletters
Name of the Vulnerable Software and Affected Versions: Email Subscribers & Newsletters plugin version 4.1.6 Description: The issue allows an attacker to inject malicious JavaScript code through a publicly available subscription form. This is achieved by exploiting the esfpx name parameter in the...
WordPress Email Subscribers Plugin < 4.1.8 SQLi Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.112611";...
Email Subscribers & Newsletters < 4.1.8 - SQL Injection
A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
CVE-2019-13569
A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Sql injection
A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
CVE-2019-13569
The CVE-2019-13569 entry concerns the Icegram Email Subscribers & Newsletters plugin for WordPress, affected through version 4.1.7. The connected sources describe a SQL injection bug caused by improper sanitization of user input, enabling a remote attacker to execute arbitrary SQL commands on the...
WordPress Icegram Email Subscribers & Newsletters Plugin SQL Injection Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Email Subscribers Newsletters is one of the push message plugins used in it. A SQL injection vulnerability exists in WordPress Icegram...
Email Subscribers & Newsletters < 4.1.7 - Cross-Site Scripting (XSS)
The Email Subscribers & Newsletters – Simple and Effective Email Marketing WordPress Plugin WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
ALPINE-CVE-2018-12546
In Eclipse Mosquitto version 1.0 to 1.5.5 inclusive when a client publishes a retained message to a topic, then has its access to that topic revoked, the retained message will still be published to clients that subscribe to that topic in the future. In some applications this may result in clients...
PewDiePie ransomware forcing users to subscribe him on YouTube
By Waqas T-Series - PewDiePie Battle Takes an Ugly Turn- PewDiePie Fans Launching PewDiePie ransomware to Get Followers. The battle between T-Series and PewDiePie for the top slot on YouTube is getting more fierce and dramatic day by day. Where T-Series fans are supporting the Indian music compan...