CVE-2022-1614

The WP-EMail WordPress plugin before 2.69.0 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTEADDR, which makes it possible to bypass IP-based anti-spamming restrictions...

CVE-2022-1547

The Check & Log Email WordPress plugin before 1.0.6 does not sanitise and escape a parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting...

WordPress plugin cross-site scripting vulnerability (CNVD-2021-102401)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in the Check ...

Cross site scripting

The Check & Log Email WordPress plugin before 1.0.4 does not escape the d parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting...

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the WordPress plugin Contact Form Email, which stems from...

WordPress Contact Form Email plugin <= 1.3.24 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Mohammed Aadhil Ashfaq in WordPress Contact Form Email plugin versions = 1.3.24. Solution Update the WordPress Contact Form Email plugin to the latest available version at least 1.3.25...

CVE-2021-24774

The CVE-2021-24774 entry applies to the WordPress plugin Check & Log Email (before version 1.0.3). The vulnerability is a SQL injection caused by failing to validate/escape the GET parameters order and orderby when viewing logs, allowing manipulation of SQL statements. Affected component: Check &...

WordPress Check & Log Email plugin <= 1.0.2 - Multiple SQL Injection (SQLi) vulnerabilities

Multiple SQL Injection SQLi vulnerabilities were discovered by bl4derunner in WordPress Check & Log Email plugin versions = 1.0.2. Solution Update the WordPress Check & Log Email plugin to the latest available version at least 1.0.3...

CVE-2020-5767

Cross-site request forgery in Icegram Email Subscribers & Newsletters Plugin for WordPress v4.4.8 allows a remote attacker to send forged emails by tricking legitimate users into clicking a crafted link...

CloudBees Jenkins LDAP Email Plugin Password Disclosure Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Dependency Graph Viewer Plugin is used in...

CVE-2019-10434

Jenkins LDAP Email Plugin transmits configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure...

CVE-2019-10434

Jenkins LDAP Email Plugin transmits configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure...

CVE-2019-10434

The CVE-2019-10434 entry concerns the Jenkins LDAP Email Plugin which transmits configured credentials in plain text in the global Jenkins configuration form, potentially exposing them. Connected sources reiterate: credentials disclosure via the configuration UI, specifically affecting the Jenkin...

WordPress check-email plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress check-email plugin versions prior to 0.5.2. The...

CVE-2016-10934

The check-email plugin before 0.5.2 for WordPress has XSS...

CVE-2016-10934

CVE-2016-10934 affects the WordPress Check Email plugin prior to 0.5.2, with an XSS vulnerability stemming from insufficient validation of client-side data. Exploitation could involve remote access with network access and requires user interaction per CVSS details; impact is limited to client-sid...

CVE-2016-10934

The check-email plugin before 0.5.2 for WordPress has XSS...

CVE-2018-20963

The contact-form-to-email plugin before 1.2.66 for WordPress has XSS...

CVE-2018-20964

The contact-form-to-email plugin before 1.2.66 for WordPress has CSRF...

WordPress Contact Form Email plugin <= 1.2.65 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found by Tim Coen in WordPress Contact Form Email plugin versions = 1.2.65. Solution Update the WordPress Contact Form Email plugin to the latest available version at least 1.2.66...