WordPress MailerPress – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin <= 2.0.4 - Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Authenticated Author+ Stored Cross-Site Scripting vulnerability discovered by Faizan Shaik in WordPress Plugin MailerPress versions = 2.0.4...

CVE-2024-38691

CVE-2024-38691 affects the Metorik – Reports & Email Automation for WooCommerce WordPress plugin (

Mars: phpinfo() exposed on ██████████

The phpinfo page was exposed on the Royal Canin email automation API server, revealing sensitive system configuration details and technical information about the PHP environment...

WordPress Metorik plugin <= 1.7.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Metorik – Reports & Email Automation for WooCommerce versions = 1.7.1...

WordPress Metorik – Reports & Email Automation for WooCommerce Plugin <= 1.7.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Metorik – Reports & Email Automation for WooCommerce Type Plugin Vulnerable versions = 1.7.1 Fixed in 1.7.2 OWASP Top 10 A6: Security Misconfiguration Classification Cross Site Request Forgery CSRF CVE CVE-2024-38691 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID...

WordPress AutoMail – Event-driven Email Automation. Easy email Notification and Auto-reply. Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software AutoMail – Event-driven Email Automation. Easy email Notification and Auto-reply. Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim...

WordPress AutoMail – Event-driven Email Automation. Easy email Notification and Auto-reply plugin <= 1.0.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress AutoMail – Event-driven Email Automation. Easy email Notification and Auto-reply plugin versions = 1.0.0. Solution Update the WordPress AutoMail – Event-driven Email Automation. Easy email Notification and Auto-reply plugin to...

Email Sender Identity is Key to Solving the Phishing Crisis

Email is in crisis. Despite massive advancements in perimeter and endpoint defenses, email remains a cybersecurity weak link for many companies. Why? Email is at the heart of everything we do online. It’s an essential line of communication for one-on-one and group conversations, both...

Domain Analyzer

Domain analyzer is a security analysis tool which automatically discovers and reports information about the given domain. Its main purpose is to analyze domains in an unattended way. Domain analyzer takes a domain name and finds information about it, such as DNS servers, mail servers, IP addresse...