Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
postieplugin postie vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2012-2580
Cross-site scripting (XSS) vulnerability in the Postie plugin 1.4.3, and possibly prior to 1.5.15, for WordPress allows remote malicious users to inject arbitrary web script or HTML via the From field of an email.
Postieplugin Postie
Postieplugin Postie 1.4.3
1 EDB exploit
5.4
CVSSv3
CVE-2019-20204
The Postie plugin 1.9.40 for WordPress allows XSS, as demonstrated by a certain payload with jaVasCript:/* at the beginning and a crafted SVG element.
Postieplugin Postie
1 Github repository
5.3
CVSSv3
CVE-2019-20203
The Authorized Addresses feature in the Postie plugin 1.9.40 for WordPress allows remote malicious users to publish posts by spoofing the From information of an email message.
Postieplugin Postie
1 Github repository
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
man-in-the-middle
CVE-2024-34558
CVE-2024-32674
CVE-2024-34351
XPath injection
CVE-2023-45866
CVE-2024-25528
CVE-2024-25517
path traversal
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started