EUVD-2018-2073

Malware in sbrugna...

CVE-2018-1002007

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit. There is an XSS vulnerability in integration-contact-form.html.php:15: via POST request variable htmlid...

CVE-2018-1002000

There is blind SQL injection in WordPress Arigato Autoresponder and Newsletter v2.5.1.8 These vulnerabilities require administrative privileges to exploit. There is an exploitable blind SQL injection vulnerability via the delids variable by POST request...

CVE-2018-1002001

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit...

CVE-2018-1002003: Improper Neutralization of Input During Web Page Generation

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit...

CVE-2018-1002007: Improper Neutralization of Input During Web Page Generation

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit. There is an XSS vulnerability in integration-contact-form.html.php:15: via POST request variable htmlid...

CVE-2018-1002004: Improper Neutralization of Input During Web Page Generation

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit...

PT-2018-9608

Name of the Vulnerable Software and Affected Versions: WordPress Arigato Autoresponder and Newsletter version 2.5.1.8 Description: The issue is related to a blind SQL injection vulnerability that can be exploited via the del ids variable by sending a POST request. This vulnerability requires...

PT-2018-9609

Name of the Vulnerable Software and Affected Versions: WordPress Arigato Autoresponder and News letter version 2.5.1.8 Description: The issue is a reflected XSS vulnerability that requires administrative privileges to exploit. Recommendations: For version 2.5.1.8, update to a newer version that...

PT-2018-9610

Name of the Vulnerable Software and Affected Versions: WordPress Arigato Autoresponder and News letter version 2.5.1.8 Description: A reflected XSS issue exists, requiring administrative privileges for exploitation. Recommendations: For version 2.5.1.8, at the moment, there is no information abou...

PT-2018-9611

Name of the Vulnerable Software and Affected Versions: WordPress Arigato Autoresponder and News letter version 2.5.1.8 Description: The issue is a reflected XSS vulnerability that requires administrative privileges to exploit. Recommendations: For WordPress Arigato Autoresponder and News letter...

PT-2018-9616

Name of the Vulnerable Software and Affected Versions: WordPress Arigato Autoresponder and News letter version 2.5.1.8 Description: The issue is related to a reflected XSS vulnerability that requires administrative privileges to exploit. It is located in the list-user.html.php file and can be...

PT-2018-9612

Name of the Vulnerable Software and Affected Versions: WordPress Arigato Autoresponder and News letter version 2.5.1.8 Description: The issue is a reflected XSS vulnerability that requires administrative privileges to exploit. Recommendations: For WordPress Arigato Autoresponder and News letter...

CVE-2018-1002009: Improper Neutralization of Input During Web Page Generation

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit. There is an XSS vulnerability in unsubscribe.html.php:3: via GET reuqest to the email variable...

PT-2018-9615

Name of the Vulnerable Software and Affected Versions: WordPress Arigato Autoresponder and News letter version 2.5.1.8 Description: The issue is related to a reflected XSS vulnerability that requires administrative privileges to exploit. It is located in the integration-contact-form.html.php file...

CVE-2018-1002001: Improper Neutralization of Input During Web Page Generation

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit...

CVE-2018-1002008: Improper Neutralization of Input During Web Page Generation

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit. There is an XSS vulnerability in list-user.html.php:4: via GET request offset variable...

CVE-2018-1002000: Improper Neutralization of Special Elements used in an SQL Command

There is blind SQL injection in WordPress Arigato Autoresponder and Newsletter v2.5.1.8 These vulnerabilities require administrative privileges to exploit. There is an exploitable blind SQL injection vulnerability via the delids variable by POST request...

CVE-2018-1002002: Improper Neutralization of Input During Web Page Generation

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit...

WordPress Arigato Autoresponder And Newsletter 2.5 SQL Injection / XSS

Title: Blind SQL injection and multiple reflected XSS vulnerabilities in Wordpress Plugin Arigato Autoresponder and Newsletter v2.5 Author: Larry W. Cashdollar, @larry0 Date: 2018-08-22...