2 matches found
CVE-2018-20987
The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection...
9.8CVSS9.9AI score0.02129EPSS
SaveExploits0References2
CVE-2018-20987
CVE-2018-20987 affects the Newsletters Lite WordPress plugin. The connected documents confirm a PHP object injection flaw in newsletters-lite before version 4.6.8.6, caused by an insecure deserialization condition in the plugin’s code path. This vulnerability can enable remote code execution or s...
9.8CVSS9.7AI score0.02129EPSS
SaveExploits0References2Affected Software1
20