CVE-2019-20361-EXPLOIT

CVE-2019-20361-EXPLOIT WordPress 플러그인 Email Subscribers & Newsletters 4.3.1 이전 버전에 SQL 문이 hash 매개변수를 통해 데이터베이스에 전달될 수 있는 결함이 있었습니다 블라인드 SQL 인젝션 취약점. 이 스크립트는 exploit-db.com에서 제공되는 @KBA@SOGETIESEC이 만든 원본 스크립트의 "정화된 버전"입니다. 원본 버전은 RaidForums.com에서 정화되었습니다. 명령어 $ git clone...

WordPress Newsletters <= 4.13 - Unauthenticated SQL Injection

Newsletters WordPress plugin = 4.13 contains a time-based SQL injection caused by insufficient escaping of the 'wpmlsubscriberid' parameter, letting unauthenticated attackers extract sensitive database information. id: CVE-2026-3018 info: name: WordPress Newsletters = 4.13 - Unauthenticated SQL...

Email Subscribers & Newsletters <= 5.3.1 - Authenticated SQL Injection

The Email Subscribers & Newsletters WordPress plugin before 5.3.2 does not correctly escape the order and orderby parameters to the ajaxfetchreportlist action, making it vulnerable to blind SQL injection attacks by users with roles as low as Subscriber. Further, it does not have any CSRF protecti...

Newsletters < 4.16 - Unauthenticated SSRF via SNS Bounce Handler

Newsletters WordPress plugin 4.16 contains a server-side request forgery caused by lack of authentication and validation in bounce-processing requests, letting unauthenticated attackers make arbitrary requests to internal or external hosts. id: CVE-2026-16268 info: name: Newsletters 4.16 -...

CVE-2025-30921

CVE-2025-30921 1️⃣ 구성 요소 유형 WordPress 플러그인 2️⃣ 구성 요소 세부 정보 구성 요소 이름 Newsletters 취약한 버전 부분에 기록해 둔 security 값을 입력하고 해당 URL로 요청을 보냅니다. http://localhost:8080/wp-admin/admin-ajax.php?action=...

CVE-2026-97074

Subscriber Insecure Direct Object References IDOR in Newsletters, Email Marketing, SMS and Popups by Omnisend = 1.9.0 versions...

CVE-2026-97074 WordPress Newsletters, Email Marketing, SMS and Popups by Omnisend plugin <= 1.9.0 - Insecure Direct Object References (IDOR) vulnerability

Subscriber Insecure Direct Object References IDOR in Newsletters, Email Marketing, SMS and Popups by Omnisend = 1.9.0 versions...

CVE-2026-97074 WordPress Newsletters, Email Marketing, SMS and Popups by Omnisend plugin <= 1.9.0 - Insecure Direct Object References (IDOR) vulnerability

Subscriber Insecure Direct Object References IDOR in Newsletters, Email Marketing, SMS and Popups by Omnisend = 1.9.0 versions...

EUVD-2026-89894

Subscriber Insecure Direct Object References IDOR in Newsletters, Email Marketing, SMS and Popups by Omnisend = 1.9.0 versions...

CVE-2026-97074

The Newsletters, Email Marketing, SMS and Popups by Omnisend WordPress plugin versions

WordPress Newsletters, Email Marketing, SMS and Popups by Omnisend plugin <= 1.9.0 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Elaprendiz1927 in WordPress Plugin Newsletters, Email Marketing, SMS and Popups by Omnisend versions = 1.9.0...

CVE-2014-4725

CVE-2014-4725 이 스크립트는 WordPress에서 CVE-2014-4725 취약점MailPoet/Wysija 뉴스레터을 스캔하고 익스플로잇하는 데 사용됩니다. 기능 스캔 모드 CVE-2014-4725에 취약한 WordPress 대상 탐지 익스플로잇 모드 취약한 대상에 zip 페이로드 업로드 설치 1. 저장소를 클론합니다: git clone https://github.com/username/CVE-2014-4725.git cd CVE-2014-4725 2. 의존성을 설치합니다: pip install requests 사...

WordPress Newsletters plugin < 4.18.1 - Unauthenticated Subscriber Record Overwrite and PII Disclosure vulnerability

Unauthenticated Subscriber Record Overwrite and PII Disclosure vulnerability discovered by Yaswanth Reddy Sunkara in WordPress Plugin Newsletters versions 4.18.1...

CVE-2026-83555

The Email Subscribers & Newsletters WordPress plugin before 5.9.35 does not verify the per-subscriber management token before changing a subscriber's subscription status, allowing unauthenticated users to force-unsubscribe or force-confirm an arbitrary subscriber whose email address they know...

CVE-2026-16264

The Newsletters WordPress plugin before 4.18.1 does not perform an ownership check on some of its subscriber management actions, and issues a management session to unauthenticated visitors on request, allowing attackers to read any subscriber's personal data and overwrite any subscriber's record...

CVE-2026-83555

The Email Subscribers & Newsletters WordPress plugin (versions before 5.9.35 ) is vulnerable to an unauthenticated subscription status change . The root cause is a failure to verify the per-subscriber management token when updating subscription statuses. This allows unauthenticated users to force...

CVE-2026-83555 Email Subscribers by Icegram Express < 5.9.35 - Unauthenticated Subscription Status Change via Missing Token Verification

The Email Subscribers & Newsletters WordPress plugin before 5.9.35 does not verify the per-subscriber management token before changing a subscriber's subscription status, allowing unauthenticated users to force-unsubscribe or force-confirm an arbitrary subscriber whose email address they know...

EUVD-2026-85031

The Email Subscribers & Newsletters WordPress plugin before 5.9.35 does not verify the per-subscriber management token before changing a subscriber's subscription status, allowing unauthenticated users to force-unsubscribe or force-confirm an arbitrary subscriber whose email address they know...

CVE-2026-83555 Email Subscribers by Icegram Express < 5.9.35 - Unauthenticated Subscription Status Change via Missing Token Verification

The Email Subscribers & Newsletters WordPress plugin before 5.9.35 does not verify the per-subscriber management token before changing a subscriber's subscription status, allowing unauthenticated users to force-unsubscribe or force-confirm an arbitrary subscriber whose email address they know...

WordPress Email Subscribers & Newsletters plugin < 5.9.35 - Unauthenticated Subscription Status Change vulnerability

Unauthenticated Subscription Status Change vulnerability discovered by Usama Arshad in WordPress Plugin Email Subscribers & Newsletters versions 5.9.35...