WordPress plugin MC4WP: Mailchimp for WordPress 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

Mars: unsubscribe anyone from all ████████ emails @ █████

The vulnerability allowed for the unsubscription of arbitrary users from all Banfield emails by manipulating the subscriber ID sid parameter in the unsubscribe URL. This issue was classified under CWE-284: Improper Access Control. The predictable nature of the sid parameter enabled potential mass...

CVE-2021-40347

The CVE-2021-40347 issue affects GNU Mailman Postorius (views/list.py) for versions before 1.3.5. An authenticated attacker can send a crafted POST request to unsubscribe any user from a mailing list and can reveal whether that address was subscribed. Remediation: upgrade Postorius to 1.3.5 or ne...