Eelv Newsletter Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Eelv Newsletter Project records in CISA KEV

No Eelv Newsletter Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2017-13696 CVE-2017-18523 · GHSA-2q6j-qv6q-3722

LOW 39

The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00674 Published 2019-08-20 No fix listed CWE-352

TI-2017-13695 CVE-2017-18522 · GHSA-j59f-mm66-w5rj

LOW 29

The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00905 Published 2019-08-20 No fix listed CWE-79

TI-2013-06171 CVE-2013-10028 · GHSA-7cmx-pq9m-76p5

LOW 28

A vulnerability was found in EELV Newsletter Plugin 2.x on WordPress.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00546 Published 2023-06-04 No fix listed CWE-79