Popup by Supsystic < 1.10.9 - Subscriber Email Addresses Disclosure Detection

The Popup by Supsystic WordPress plugin before 1.10.9 does not have any authentication and authorisation in an AJAX action, allowing unauthenticated attackers to call it and get the email addresses of subscribed users !/usr/bin/env python3 -- coding: utf-8 -- """The Popup by Supsystic WordPress...

WordPress Shield Security: Blocks Bots, Protects Users, and Prevents Security Breaches plugin <= 21.0.9 - Missing Authorization to Authenticated (Subscriber+) Email MFA Update vulnerability

Missing Authorization to Authenticated Subscriber+ Email MFA Update vulnerability discovered by shark3y in WordPress Plugin Shield Security versions = 21.0.9...

WordPress WooCommerce Customers Manager plugin < 29.8 - Subscriber+ Email Disclosure vulnerability

Subscriber+ Email Disclosure vulnerability discovered by Erwan LR WPScan in WordPress Plugin WooCommerce Customers Manager versions 29.8...

CVE-2022-0424 Popup by Supsystic < 1.10.9 - Unauthenticated Subscriber Email Addresses Disclosure

The Popup by Supsystic WordPress plugin before 1.10.9 does not have any authentication and authorisation in an AJAX action, allowing unauthenticated attackers to call it and get the email addresses of subscribed users...

CVE-2022-0164

The Coming soon and Maintenance mode WordPress plugin before 3.5.3 does not have authorisation and CSRF checks in its comingsoonsendmail AJAX action, allowing any authenticated users, with a role as low as subscriber to send arbitrary emails to all subscribed users...

CVE-2018-20154: Exposure of Sensitive Information to an Unauthorized Actor

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated users to discover all subscriber e-mail addresses...

Sql injection

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/subscriberlist.php with the POST Parameter: subscriberemail...

PT-2017-17171

Name of the Vulnerable Software and Affected Versions Mail Masta plugin version 1.0 Description A SQL injection issue is present, which can be exploited with WordPress admin access. This issue affects the ./inc/subscriber list.php file, specifically the subscriber email parameter in POST requests...

Assembla.com Cross Site Scripting

Date: 25.02.2012 Author: Sony Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/assemblacom-cross-site-scripting.html .................................................................. Create FreeSpace...

open NewsLetter 2.5 - Multiple Vulnerabilities (2)

!/usr/bin/php -q -d shortopentag=on \r\n"; echo "Thanks to rgod for the php code and Marty for the Love\r\n\r\n"; if $argc Related: None\r\n"; echo " |- Es: php ".$argv0." localhost /opnletter/ 1\r\n\r\n"; echo " 2 - Credential Retrieve\r\n"; echo " |- Related: None\r\n"; echo " |- Es: php...