Freshmail

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Freshmail records in CISA KEV

No Freshmail vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2015-07873 CVE-2015-9496 · GHSA-4jh9-8gvv-965j

MEDIUM 42

The freshmail-newsletter plugin before 1.6 for WordPress has shortcode.php SQL Injection via the 'FM_form id=' substring.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02172 Published 2019-10-22 No fix listed CWE-89