CVE-2013-10028

The CVE-2013-10028 entry concerns the EELV Newsletter Plugin for WordPress (versions 2.x). The vulnerability lies in the function style_newsletter (lettreinfo.php), where improper handling of the email parameter enables cross-site scripting. The issue can be exploited remotely. A patch is availab...

CVE-2017-18523

The CVE-2017-18523 entry applies to the WordPress eelv-newsletter plugin: versions before 4.6.1 are affected by a CSRF in the address book. The vulnerability allows CSRF-enabled actions without sufficient user interaction, potentially enabling unintended requests. Public references in connected d...

CVE-2017-18522

The CVE-2017-18522 entry concerns the eelv-newsletter WordPress plugin, prior to version 4.6.1. The vulnerability is an XSS flaw in the plugin’s address book, as described by multiple sources (including NVD and CNVD). Impact details in the documents indicate client-side code execution could be po...