newsletters vulnerabilities and exploits

(subscribe to this query)

Multiple SQL injection vulnerabilities in the Wysija Newsletters plugin prior to 2.2.1 for WordPress allow remote authenticated administrators to execute arbitrary SQL commands via the (1) search or (2) orderby parameter to wp-admin/admin.php. NOTE: this can be leveraged using CS...

Wysija Newsletters Project Wysija Newsletters Wysija Newsletters Project Wysija Newsletters 2.0 Wysija Newsletters Project Wysija Newsletters 2.0.1 Wysija Newsletters Project Wysija Newsletters 2.0.2 Wysija Newsletters Project Wysija Newsletters 2.0.3 Wysija Newsletters Project Wysija Newsletters 2.0.4 Wysija Newsletters Project Wysija Newsletters 2.0.5 Wysija Newsletters Project Wysija Newsletters 2.0.6 Wysija Newsletters Project Wysija Newsletters 2.0.7 Wysija Newsletters Project Wysija Newsletters 2.0.8 Wysija Newsletters Project Wysija Newsletters 2.0.9 Wysija Newsletters Project Wysija Newsletters 2.0.9.5

1 EDB exploit

Cross-site request forgery (CSRF) vulnerability in the MailPoet Newsletters (wysija-newsletters) plugin prior to 2.6.11 for WordPress allows remote malicious users to hijack the authentication of arbitrary users.

Mailpoet Mailpoet Newsletters Mailpoet Mailpoet Newsletters 0.9 Mailpoet Mailpoet Newsletters 0.9.1 Mailpoet Mailpoet Newsletters 0.9.2 Mailpoet Mailpoet Newsletters 0.9.6 Mailpoet Mailpoet Newsletters 1.0 Mailpoet Mailpoet Newsletters 1.0.1 Mailpoet Mailpoet Newsletters 1.1 Mailpoet Mailpoet Newsletters 1.1.1 Mailpoet Mailpoet Newsletters 1.1.2 Mailpoet Mailpoet Newsletters 1.1.3 Mailpoet Mailpoet Newsletters 1.1.4

Unspecified vulnerability in the MailPoet Newsletters (wysija-newsletters) plugin prior to 2.6.8 for WordPress has unspecified impact and attack vectors.

Mailpoet Mailpoet Newsletters Mailpoet Mailpoet Newsletters 0.9 Mailpoet Mailpoet Newsletters 0.9.1 Mailpoet Mailpoet Newsletters 0.9.2 Mailpoet Mailpoet Newsletters 0.9.6 Mailpoet Mailpoet Newsletters 1.0 Mailpoet Mailpoet Newsletters 1.0.1 Mailpoet Mailpoet Newsletters 1.1 Mailpoet Mailpoet Newsletters 1.1.1 Mailpoet Mailpoet Newsletters 1.1.2 Mailpoet Mailpoet Newsletters 1.1.3 Mailpoet Mailpoet Newsletters 1.1.4

The MailPoet Newsletters (wysija-newsletters) plugin prior to 2.6.7 for WordPress allows remote malicious users to bypass authentication and execute arbitrary PHP code by uploading a crafted theme using wp-admin/admin-post.php and accessing the theme in wp-content/uploads/wysija/...

Mailpoet Mailpoet Newsletters Mailpoet Mailpoet Newsletters 0.9 Mailpoet Mailpoet Newsletters 0.9.1 Mailpoet Mailpoet Newsletters 0.9.2 Mailpoet Mailpoet Newsletters 0.9.6 Mailpoet Mailpoet Newsletters 1.0 Mailpoet Mailpoet Newsletters 1.0.1 Mailpoet Mailpoet Newsletters 1.1 Mailpoet Mailpoet Newsletters 1.1.1 Mailpoet Mailpoet Newsletters 1.1.2 Mailpoet Mailpoet Newsletters 1.1.3 Mailpoet Mailpoet Newsletters 1.1.4

1 EDB exploit

The Nifty Newsletters WordPress plugin is vulnerable to Cross-Site Request Forgery via the sola_nl_wp_head function found in the ~/sola-newsletters.php file which allows malicious users to inject arbitrary web scripts, in versions up to and including 4.0.23.

Sola-newsletters Project Sola-newsletters

Directory traversal vulnerability in index.php in PHP Multiple Newsletters 2.7, when magic_quotes_gpc is disabled, allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.

Php Multiple Newsletters Php Multiple Newsletters 2.7

1 EDB exploit

Cross-site scripting vulnerability in Email Subscribers & Newsletters versions before 3.5.0 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.

Email Subscribers & Newsletters Project Email Subscribers & Newsletters

Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Newsletters plugin <= 4.8.8 versions.

Tribulant Newsletters

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Tribulant Newsletters allows Reflected XSS.This issue affects Newsletters: from n/a up to and including 4.9.5.

Tribulant Newsletters

The Newsletters plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.9.9.2. This is due to the plugin not restricting what user meta can be updated as screen options. This makes it possible for authenticated attackers, with subscriber...

Tribulant Newsletters

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook