prasunsen

Records84All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high18CVSS 7.0–8.9

Exploited now

prasunsen records in CISA KEV

No prasunsen vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Chained Quiz 19 records MEDIUM Arigato Autoresponder And Newsletter 16 records MEDIUM Watu Quiz 12 records HIGH Namaste! Lms 8 records HIGH Hostel 5 records MEDIUM Konnichiwa 1 record LOW Moolamojo 1 record LOW Watupro 1 record LOW

Records

16 records in Arigato Autoresponder And Newsletter · all components

TI-2023-00514 CVE-2023-0543 · GHSA-qvc8-j43h-xvpp

Arigato Autoresponder and Newsletter < 2.1.7.2 - Admin+ Stored XSS

MEDIUM 55

The Arigato Autoresponder and Newsletter WordPress plugin before 2.1.7.2 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting atta…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00465 Published 2023-02-27 Fixed in 2.1.7.2

TI-2018-13057 CVE-2018-18461 · GHSA-frx7-v62v-c7q3

The Arigato Autoresponder and Newsletter (aka bft-autoresponder) v2.5.1.7 plugin for…

MEDIUM 49

The Arigato Autoresponder and Newsletter (aka bft-autoresponder) v2.5.1.7 plugin for WordPress allows remote attackers to execute arbitrary code via PHP code in attachments[] data to models/attachment.php.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04184 Published 2018-10-18 No fix listed CWE-94

TI-2018-16115 CVE-2018-1002000 · GHSA-xhcp-hwcp-p5wq

SQL injection in prasunsen Arigato Autoresponder and Newsletter

LOW 39

There is blind SQL injection in WordPress Arigato Autoresponder and Newsletter v2.5.1.8 These vulnerabilities require administrative privileges to exploit.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.04354 Published 2018-12-03 No fix listed CWE-89

TI-2023-25824 CVE-2023-47686 · GHSA-7x2q-44vg-c7fh

WordPress Arigato Autoresponder and Newsletter Plugin <= 2.7.2.2 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.2.2 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00261 Published 2023-11-16 No fix listed CWE-352

TI-2023-10493 CVE-2023-25020 · GHSA-wf3p-x594-p2w8

WordPress Arigato Autoresponder and Newsletter Plugin <= 2.7.1.1 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.1.1 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00406 Published 2023-04-07 No fix listed CWE-79

TI-2023-10533 CVE-2023-25061 · GHSA-q4w7-p77w-r38f

WordPress Arigato Autoresponder and Newsletter Plugin <= 2.7.1.1 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.1.1 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00383 Published 2023-04-07 No fix listed CWE-79

TI-2018-16120 CVE-2018-1002005 · GHSA-xg9p-gw4f-gxg2

Cross-site scripting in prasunsen Arigato Autoresponder and Newsletter

LOW 28

These vulnerabilities require administrative privileges to exploit.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.03142 Published 2018-12-03 No fix listed CWE-79

TI-2023-10504 CVE-2023-25031 · GHSA-7r66-58vf-pw2f

WordPress Arigato Autoresponder and Newsletter Plugin <= 2.7.1 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.1 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00394 Published 2023-04-07 No fix listed CWE-79

TI-2018-16124 CVE-2018-1002009 · GHSA-f4m7-984x-2j9p

Cross-site scripting in prasunsen Arigato Autoresponder and Newsletter

LOW 27

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.02604 Published 2018-12-03 No fix listed CWE-79

TI-2018-16123 CVE-2018-1002008 · GHSA-5m9r-9h7v-p67q

Cross-site scripting in prasunsen Arigato Autoresponder and Newsletter

LOW 27

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.02582 Published 2018-12-03 No fix listed CWE-79

TI-2018-16122 CVE-2018-1002007 · GHSA-cg22-m5xf-vmfv

Cross-site scripting in prasunsen Arigato Autoresponder and Newsletter

LOW 27

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.02582 Published 2018-12-03 No fix listed CWE-79

TI-2018-16121 CVE-2018-1002006 · GHSA-3gv4-2fhp-6ghv

Cross-site scripting in prasunsen Arigato Autoresponder and Newsletter

LOW 27

These vulnerabilities require administrative privileges to exploit.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.02582 Published 2018-12-03 No fix listed CWE-79

TI-2018-16119 CVE-2018-1002004 · GHSA-chjh-wjmc-rp5v

Cross-site scripting in prasunsen Arigato Autoresponder and Newsletter

LOW 27

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.02923 Published 2018-12-03 No fix listed CWE-79

TI-2018-16118 CVE-2018-1002003 · GHSA-wgq6-j6rq-j32p

Cross-site scripting in prasunsen Arigato Autoresponder and Newsletter

LOW 27

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.02923 Published 2018-12-03 No fix listed CWE-79

TI-2018-16117 CVE-2018-1002002 · GHSA-g4c5-892w-93p4

Cross-site scripting in prasunsen Arigato Autoresponder and Newsletter

LOW 27

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.02923 Published 2018-12-03 No fix listed CWE-79

TI-2018-16116 CVE-2018-1002001 · GHSA-7f47-54gh-37fv

Cross-site scripting in prasunsen Arigato Autoresponder and Newsletter

LOW 27

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.02948 Published 2018-12-03 No fix listed CWE-79

Open these records in search →

Critical	3
High	18
Medium	63
Low	0
No CVSS	0