Donweb

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Donweb records in CISA KEV

No Donweb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Envialosimple 1 record MEDIUM Envialosimple 1 record MEDIUM

Records

1 record in Envialosimple · all components

TI-2024-01975 CVE-2024-2125 · GHSA-85jh-9232-5897

EnvíaloSimple: Email Marketing y Newsletters <= 2.3 - Cross-Site Request Forgery to Arbitrary File Upload

MEDIUM 40

The EnvíaloSimple: Email Marketing y Newsletters plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00414 Published 2024-04-09 No fix listed CWE-434

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0