EUVD-2025-198861

Malicious code in @kvytech/medusa-plugin-newsletter npm...

Malicious code in @kvytech/medusa-plugin-newsletter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99033b798316d2e4a30d7900d30e42c8339263e325be24419a9856beb1623378 The package @kvytech/medusa-plugin-newsletter was found to contain malicious code. Source: ghsa-malware...

WordPress Plugin Newsletter 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers, and WordPress plugin is an applicatio...

WordPress Plugin Newsletter & Bulk Email Sender Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Newsletter & Bulk Email...

Plugin Newsletter 1.5 - Remote File Disclosure

The plugin-newsletter WordPress plugin was affected by a Remote File Disclosure security vulnerability...

CVE-2012-3588

Directory traversal vulnerability in preview.php in the Plugin Newsletter plugin 1.5 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the data parameter...

Directory traversal

Directory traversal vulnerability in preview.php in the Plugin Newsletter plugin 1.5 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the data parameter...

CVE-2012-3588

Directory traversal vulnerability in preview.php in the Plugin Newsletter plugin 1.5 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the data parameter...

CVE-2012-3588

CVE-2012-3588 corresponds to a directory traversal vulnerability in the WordPress Newsletter plugin (version 1.5) where the preview.php script fails to sanitize the data parameter, allowing remote attackers to read arbitrary files using .. in the data parameter. Multiple sources (WPScan, Tenable/...