Lucene search
+L

698 matches found

Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2024-47889

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there i...

8.7CVSS6.2AI score0.00937EPSS
SaveExploits0References2
NVD
NVD
added 2025/03/03 2:15 p.m.4 views

CVE-2025-23956

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Richard Leishman WP Easy Post Mailer wp-mailer allows Reflected XSS.This issue affects WP Easy Post Mailer: from n/a through = 0.64...

7.1CVSS0.00363EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/03 1:30 p.m.16 views

CVE-2025-23956 WordPress WP Easy Post Mailer Plugin <= 0.64 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Richard Leishman WP Easy Post Mailer wp-mailer allows Reflected XSS.This issue affects WP Easy Post Mailer: from n/a through = 0.64...

7.1CVSS0.00363EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/03 1:30 p.m.9 views

CVE-2025-23956 WordPress WP Easy Post Mailer Plugin <= 0.64 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Richard Leishman WP Easy Post Mailer wp-mailer allows Reflected XSS.This issue affects WP Easy Post Mailer: from n/a through = 0.64...

7.1CVSS7.2AI score0.00363EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/03 1:30 p.m.67 views

CVE-2025-23956

CVE-2025-23956 is a WordPress WordPress WP Easy Post Mailer plugin vulnerability described as an improper neutralization of input during web page generation, leading to a Reflected XSS . Affected software: WP Easy Post Mailer (versions up to 0.64). Root cause: improper input handling during page ...

7.1CVSS7.2AI score0.00363EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/03 12:0 a.m.4 views

WordPress plugin WP Easy Post Mailer 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

7.1CVSS7.7AI score0.00363EPSS
SaveExploits0References2
OSV
OSV
added 2025/02/28 1:15 p.m.6 views

CVE-2025-1319

The Site Mailer – SMTP Replacement, Email API Deliverability & Email Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t...

6.1CVSS7.4AI score0.00361EPSS
SaveExploits0References3
NVD
NVD
added 2025/02/28 1:15 p.m.17 views

CVE-2025-1319

The Site Mailer – SMTP Replacement, Email API Deliverability & Email Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t...

7.2CVSS0.00361EPSS
SaveExploits0References3
CVE
CVE
added 2025/02/28 12:44 p.m.129 views

CVE-2025-1319

The CVE-2025-1319 entry concerns the WordPress Site Mailer plugin (versions prior to or equal to 1.2.3) with Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. Affected component: the Site Mailer WordPress plugin; root cause: inadequate sanitization/escaping e...

7.2CVSS5.9AI score0.00361EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2025/02/28 12:44 p.m.28 views

CVE-2025-1319 Site Mailer <= 1.2.3 - Unauthenticated Stored Cross-Site Scripting

The Site Mailer – SMTP Replacement, Email API Deliverability & Email Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t...

7.2CVSS0.00361EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/02/28 12:44 p.m.10 views

CVE-2025-1319 Site Mailer <= 1.2.3 - Unauthenticated Stored Cross-Site Scripting

The Site Mailer – SMTP Replacement, Email API Deliverability & Email Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t...

7.2CVSS5.9AI score0.00361EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/02/28 12:3 a.m.6 views

WordPress Site Mailer plugin <= 1.2.3 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by zer0gh0st in WordPress Plugin Site Mailer versions = 1.2.3...

6.4CVSS5.7AI score0.00361EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/02/28 12:0 a.m.13 views

PT-2025-9088 · WordPress · The Site Mailer – Smtp Replacement

Name of the Vulnerable Software and Affected Versions: The Site Mailer – SMTP Replacement, Email API Deliverability & Email Log plugin for WordPress versions prior to 1.2.3 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping...

6.4CVSS8.1AI score0.00361EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/02/28 12:0 a.m.10 views

WordPress plugin Site Mailer – SMTP Replacement, Email API Deliverability & Email Log 跨站脚本漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress plugin Site Mailer - SMTP Replacement, Email API Deliverabili...

6.4CVSS7.3AI score0.00361EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2025/02/24 10:24 p.m.7 views

WordPress WPO365 | MICROSOFT 365 GRAPH MAILER plugin <= 3.2 - Open Redirect via 'redirect_to' Parameter vulnerability

Open Redirect via 'redirectto' Parameter vulnerability discovered by Krzysztof Zając in WordPress Plugin WPO365 | MICROSOFT 365 GRAPH MAILER versions = 3.2...

6.1CVSS7AI score0.00283EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2025/02/24 11:15 a.m.10 views

CVE-2025-1488

The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 3.2. This is due to insufficient validation on the redirect url supplied via the 'redirectto' parameter. This makes it possible for unauthenticated attackers to redire...

6.1CVSS7.3AI score
SaveExploits0References4
NVD
NVD
added 2025/02/24 11:15 a.m.20 views

CVE-2025-1488

The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 3.2. This is due to insufficient validation on the redirect url supplied via the 'redirectto' parameter. This makes it possible for unauthenticated attackers to redire...

6.1CVSS0.00283EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/02/24 11:10 a.m.18 views

CVE-2025-1488 WPO365 | MICROSOFT 365 GRAPH MAILER <= 3.2 - Open Redirect via 'redirect_to' Parameter

The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 3.2. This is due to insufficient validation on the redirect url supplied via the 'redirectto' parameter. This makes it possible for unauthenticated attackers to redire...

4.7CVSS0.00283EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/02/24 12:0 a.m.6 views

WordPress plugin WPO365 MICROSOFT 365 GRAPH MAILER 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation error...

6.1CVSS8.8AI score0.00283EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/02/05 6:48 a.m.12 views

CVE-2024-50530

Unrestricted Upload of File with Dangerous Type vulnerability in Myriad Solutionz Stars SMTP Mailer stars-smtp-mailer allows Upload a Web Shell to a Web Server.This issue affects Stars SMTP Mailer: from n/a through = 2.2.1...

9.9CVSS5.9AI score0.00482EPSS
SaveExploits0References1
Rows per page
Query Builder