Lucene search
+L

2 matches found

Patchstack
Patchstack
added 2024/06/12 8:17 a.m.9 views

WordPress Newsletter - API addon for Newsletter plugin <= 2.4.5 - Missing Authorization to Email Subscribers Management vulnerability

WordPress Newsletter - API addon for Newsletter plugin = 2.4.5 - Missing Authorization to Email Subscribers Management vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin Newsletter - API addon Premium versions = 2.4.5...

6.5CVSS7AI score0.00317EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/06/12 12:00 a.m.22 views

WordPress Newsletter - API addon (Premium) Plugin <= 2.4.5 is vulnerable to Broken Access Control

Software Newsletter - API addon Premium Type Plugin Vulnerable versions = 2.4.5 Fixed in 2.4.6 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-5674 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID f2621f00fec2 Credits Arkadiusz...

6.5CVSS6.5AI score0.00317EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder