Lucene search
+L

719 matches found

NVD
NVD
added 2025/02/28 1:15 p.m.25 views

CVE-2025-1319

The Site Mailer – SMTP Replacement, Email API Deliverability & Email Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t...

7.2CVSS0.00383EPSS
SaveExploits0References3
OSV
OSV
added 2025/02/28 1:15 p.m.10 views

CVE-2025-1319

The Site Mailer – SMTP Replacement, Email API Deliverability & Email Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t...

6.1CVSS7.4AI score0.00383EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/02/28 12:44 p.m.11 views

CVE-2025-1319 Site Mailer <= 1.2.3 - Unauthenticated Stored Cross-Site Scripting

The Site Mailer – SMTP Replacement, Email API Deliverability & Email Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t...

7.2CVSS5.9AI score0.00383EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/02/28 12:44 p.m.39 views

CVE-2025-1319 Site Mailer <= 1.2.3 - Unauthenticated Stored Cross-Site Scripting

The Site Mailer – SMTP Replacement, Email API Deliverability & Email Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t...

7.2CVSS0.00383EPSS
SaveExploits0References3
CVE
CVE
added 2025/02/28 12:44 p.m.153 views

CVE-2025-1319

The CVE-2025-1319 entry concerns the WordPress Site Mailer plugin (versions prior to or equal to 1.2.3) with Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. Affected component: the Site Mailer WordPress plugin; root cause: inadequate sanitization/escaping e...

7.2CVSS5.9AI score0.00383EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2025/02/28 12:03 a.m.13 views

WordPress Site Mailer plugin <= 1.2.3 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by zer0gh0st in WordPress Plugin Site Mailer versions = 1.2.3...

6.4CVSS5.7AI score0.00383EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/02/28 12:00 a.m.13 views

WordPress plugin Site Mailer – SMTP Replacement, Email API Deliverability & Email Log 跨站脚本漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress plugin Site Mailer - SMTP Replacement, Email API Deliverabili...

6.4CVSS7.3AI score0.00383EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/02/28 12:00 a.m.19 views

PT-2025-9088 · WordPress · The Site Mailer – Smtp Replacement

Name of the Vulnerable Software and Affected Versions: The Site Mailer – SMTP Replacement, Email API Deliverability & Email Log plugin for WordPress versions prior to 1.2.3 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping...

6.4CVSS8.1AI score0.00383EPSS
SaveExploits0References8
Patchstack
Patchstack
added 2025/02/24 10:24 p.m.12 views

WordPress WPO365 | MICROSOFT 365 GRAPH MAILER plugin <= 3.2 - Open Redirect via 'redirect_to' Parameter vulnerability

Open Redirect via 'redirectto' Parameter vulnerability discovered by Krzysztof Zając in WordPress Plugin WPO365 | MICROSOFT 365 GRAPH MAILER versions = 3.2...

6.1CVSS7AI score0.00287EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2025/02/24 11:15 a.m.24 views

CVE-2025-1488

The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 3.2. This is due to insufficient validation on the redirect url supplied via the 'redirectto' parameter. This makes it possible for unauthenticated attackers to redire...

6.1CVSS0.00287EPSS
SaveExploits0References4
OSV
OSV
added 2025/02/24 11:15 a.m.12 views

CVE-2025-1488

The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 3.2. This is due to insufficient validation on the redirect url supplied via the 'redirectto' parameter. This makes it possible for unauthenticated attackers to redire...

6.1CVSS7.3AI score
SaveExploits0References4
Cvelist
Cvelist
added 2025/02/24 11:10 a.m.24 views

CVE-2025-1488 WPO365 | MICROSOFT 365 GRAPH MAILER <= 3.2 - Open Redirect via 'redirect_to' Parameter

The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 3.2. This is due to insufficient validation on the redirect url supplied via the 'redirectto' parameter. This makes it possible for unauthenticated attackers to redire...

4.7CVSS0.00287EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/02/24 12:00 a.m.12 views

WordPress plugin WPO365 MICROSOFT 365 GRAPH MAILER 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation error...

6.1CVSS8.8AI score0.00287EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/02/05 6:48 a.m.15 views

CVE-2024-50530

Unrestricted Upload of File with Dangerous Type vulnerability in Myriad Solutionz Stars SMTP Mailer stars-smtp-mailer allows Upload a Web Shell to a Web Server.This issue affects Stars SMTP Mailer: from n/a through = 2.2.1...

9.9CVSS5.9AI score0.00492EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/16 8:15 p.m.12 views

CVE-2025-23453

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Myriad Solutionz Stars SMTP Mailer stars-smtp-mailer allows Reflected XSS.This issue affects Stars SMTP Mailer: from n/a through = 1.7...

7.1CVSS0.00412EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/16 8:05 p.m.24 views

CVE-2025-23453 WordPress Stars SMTP Mailer plugin <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Myriad Solutionz Stars SMTP Mailer stars-smtp-mailer allows Reflected XSS.This issue affects Stars SMTP Mailer: from n/a through = 1.7...

7.1CVSS0.00412EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/16 8:05 p.m.5 views

CVE-2025-23453 WordPress Stars SMTP Mailer plugin <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Myriad Solutionz Stars SMTP Mailer stars-smtp-mailer allows Reflected XSS.This issue affects Stars SMTP Mailer: from n/a through = 1.7...

7.1CVSS8.6AI score0.00412EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/16 8:05 p.m.53 views

CVE-2025-23453

CVE-2025-23453 (Myriad Solutionz Stars SMTP Mailer) — Reflected XSS . Affected: Stars SMTP Mailer for WordPress (versions

7.1CVSS7.2AI score0.00412EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/01/16 6:43 p.m.9 views

WordPress WP Easy Post Mailer Plugin <= 0.64 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin WP Easy Post Mailer versions = 0.64...

7.1CVSS6.1AI score0.00385EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/01/16 6:41 p.m.13 views

WordPress Stars SMTP Mailer plugin <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Muhamad Agil Fachrian in WordPress Plugin Stars SMTP Mailer versions = 1.7...

7.1CVSS6.1AI score0.00412EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder