Extension WordPress
Vulnérabilités MailPoet – Newsletters, Email Marketing, and Automation
Cette page rassemble les failles publiées pour MailPoet – Newsletters, Email Marketing, and Automation, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de MailPoet – Newsletters, Email Marketing, and Automation
3 fiches
MailPoet <= 5.5.1 – Authenticated (Administrator+) Stored Cross-Site Scripting
The MailPoet – Newsletters, Email Marketing, and Automation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.5.1 due to insufficient input sanitization and output escaping. This makes…
*-5.5.1
5.5.2
06/03/2025
MailPoet <= 5.3.1 – Authenticated (Administrator+) Stored Cross-Site Scripting
The MailPoet – Newsletters, Email Marketing, and Automation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.3.1 due to insufficient input sanitization and output escaping. This makes…
*-5.3.1
5.3.2
29/10/2024
MailPoet – emails and newsletters in WordPress <= 3.23.1 – Reflected Cross-Site Scripting via URL parameter
The MailPoet plugin before 3.23.2 for WordPress allows remote attackers to inject arbitrary web script or HTML using extra parameters in the URL (Reflective Server-Side XSS).
[*, 3.23.2)
3.23.2
16/04/2019
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.