Extension WordPress

Vulnérabilités Send Users Email – Email Subscribers, Email Marketing Newsletter

Cette page rassemble les failles publiées pour Send Users Email – Email Subscribers, Email Marketing Newsletter, leurs plages de versions affectées et les correctifs signalés dans la base locale.

4Vulnérabilités
0Critiques
4Avec correctif
6,1CVSS maximal

Historique de sécurité

CVE et vulnérabilités de Send Users Email – Email Subscribers, Email Marketing Newsletter

4 fiches

CVE-2024-13362 Moyenne · 6,1
Send Users Email – Email Subscribers, Email Marketing Newsletter

Freemius <= 2.10.1 – Reflected DOM-Based Cross-Site Scripting via url Parameter

Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web…

Versions affectées

*-1.5.10

Correctif

1.6.2

Publication

30/04/2026

CVE-2024-38760 Moyenne · 5,3
Send Users Email – Email Subscribers, Email Marketing Newsletter

Send Users Email <= 1.5.1 – Unauthenticated Information Exposure

The Send Users Email plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.5.1 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information…

Versions affectées

*-1.5.1

Correctif

1.5.2

Publication

12/07/2024

CVE-2023-52126 Moyenne · 5,3
Send Users Email – Email Subscribers, Email Marketing Newsletter

Send Users Email <= 1.4.3 – Sensitive Information Exposure via Error Logs

The Send Users Email plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.3 via the plugin's error logs. This makes it possible for unauthenticated attackers to extract sensitive data about…

Versions affectées

*-1.4.3

Correctif

1.4.4

Publication

28/12/2023

CVE-2023-33999 Moyenne · 6,1
Send Users Email – Email Subscribers, Email Marketing Newsletter

Freemius SDK <= 2.5.9 – Reflected Cross-Site Scripting via fs_request_get

The Freemius SDK for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘fs_request_get’ function in versions up to, and including, 2.5.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to…

Versions affectées

1.2.0-1.4.0

Correctif

1.4.1

Publication

18/07/2023

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités