Extension WordPress
Vulnérabilités LetterPress – Elevate Your WordPress Site's E-Mail Campaigns and Marketing
Cette page rassemble les failles publiées pour LetterPress – Elevate Your WordPress Site's E-Mail Campaigns and Marketing, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de LetterPress – Elevate Your WordPress Site's E-Mail Campaigns and Marketing
2 fiches
LetterPress – Elevate Your WordPress Site's E-Mail Campaigns and Marketing <= 1.2.2 – Cross-Site Request Forgery
The LetterPress – Elevate Your WordPress Site's E-Mail Campaigns and Marketing plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.2. This is due to missing or incorrect nonce validation on…
*-1.2.2
Non indiqué
18/04/2024
LetterPress <= 1.2.2 – Authenticated (Administrator+) Stored Cross-Site Scripting via settings
The LetterPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin settings in versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level…
*-1.2.2
Non indiqué
11/05/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.