EnvialoSimple

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

EnvialoSimple records in CISA KEV

No EnvialoSimple vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Email Marketing Y Newsletters 1 record LOW

Records

4 records

TI-2023-28068 CVE-2023-51414 · GHSA-6p7c-wj96-hf8h

WordPress EnvíaloSimple Plugin <= 2.1 is vulnerable to PHP Object Injection

MEDIUM 43

Deserialization of Untrusted Data vulnerability in EnvialoSimple EnvíaloSimple: Email Marketing y Newsletters.This issue affects EnvíaloSimple: Email Marketing y Newsletters: from n/a through 2.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00565 Published 2023-12-29 No fix listed CWE-502

TI-2023-28070 CVE-2023-51416 · GHSA-24jp-gg22-pxj3

WordPress EnvíaloSimple plugin <= 2.2 - Cross Site Request Forgery (CSRF) vulnerability

LOW 28

Cross-Site Request Forgery (CSRF) vulnerability in EnvialoSimple EnvíaloSimple.This issue affects EnvíaloSimple: from n/a through 2.2.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0024 Published 2024-03-26 No fix listed CWE-352

TI-2024-21474 CVE-2024-32587 · GHSA-fqxg-rg6w-xg23

WordPress EnvíaloSimple plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EnvialoSimple EnvíaloSimple allows Reflected XSS.This issue affects EnvíaloSimple: from n/a through 2.2.

CVSS 3.1MEDIUM 5.8 Network No auth User interaction EPSS 0.00288 Published 2024-04-18 No fix listed CWE-79

TI-2014-03714 CVE-2014-4527 · GHSA-j7x3-25rm-f77v

Multiple cross-site scripting (XSS) vulnerabilities in paginas/vista-previa-form.php in…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in paginas/vista-previa-form.php in the EnvialoSimple: Email Marketing and Newsletters (envialosimple-email-marketing-y-newsletters-gratis) plugin before 1.98 for WordP…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01618 Published 2014-07-02 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	3
Low	0
No CVSS	0