CVE-2025-23602

CVE-2025-23602 involves NotFound EELV Newsletter (NotFound EELV Newsletter: vulnerable versions up to 4.8.2) and is a Cross-site Scripting (XSS) flaw caused by improper input neutralization during web page generation. Red Hat’s security advisory clarifies that this is a NotFound EELV Newsletter X...

WordPress EELV Newsletter plugin <= 4.8.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by thiennv Patchstack Alliance in WordPress Plugin EELV Newsletter versions = 4.8.2...