Extension WordPress
Vulnérabilités Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress, page 3
Cette page rassemble les failles publiées pour Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress
43 fiches
Email Subscribers & Newsletters <= 3.4.12 – Cross-Site Scripting
Cross-site scripting vulnerability in Email Subscribers & Newsletters versions prior to 3.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
*-3.4.12
3.5.0
28/05/2018
Email Subscribers & Newsletters <= 3.4.7 – Unauthenticated Subscriber Download
An issue was discovered in the "Email Subscribers & Newsletters" plugin before 3.4.8 for WordPress. Sending an HTTP POST request to a URI with /?es=export at the end, and adding option=view_all_subscribers in the body, allows downloading of a…
*-3.4.7
3.4.8
24/01/2018
Email Subscribers & Newsletters < 2.9.1 – Cross-Site Scripting
The Email Subscribers & Newsletters plugin for WordPress is vulnerable to Cross-Site Scripting in versions before 2.9.1 via the following parameters: 1) 'search' and 'es_mail_group' parameters in sendmail.php 2) 'search', 'sts', and 'cnt' parameters in view-subscriber-show.php 3) 'pagemail'…
[*, 2.9.1)
2.9.1
10/08/2015
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.