MailPoet

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

MailPoet records in CISA KEV

No MailPoet vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mailpoet Newsletters 4 records HIGH

Records

5 records

TI-2014-03889 CVE-2014-4725 · GHSA-xgmx-rr3c-2xgc

The MailPoet Newsletters (wysija-newsletters) plugin before 2.6.7 for WordPress allows…

HIGH 67

The MailPoet Newsletters (wysija-newsletters) plugin before 2.6.7 for WordPress allows remote attackers to bypass authentication and execute arbitrary PHP code by uploading a crafted theme using wp-admin/admin-post.php a…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.60656 Published 2014-07-27 No fix listed CWE-287

TI-2014-03890 CVE-2014-4726 · GHSA-fch4-9c9v-phvh

Unspecified vulnerability in the MailPoet Newsletters (wysija-newsletters) plugin before…

LOW 36

Unspecified vulnerability in the MailPoet Newsletters (wysija-newsletters) plugin before 2.6.8 for WordPress has unspecified impact and attack vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01712 Published 2014-07-27 No fix listed

TI-2014-03180 CVE-2014-3907 · GHSA-p2r5-83hf-qcmc

Cross-site request forgery (CSRF) vulnerability in the MailPoet Newsletters…

LOW 32

Cross-site request forgery (CSRF) vulnerability in the MailPoet Newsletters (wysija-newsletters) plugin before 2.6.11 for WordPress allows remote attackers to hijack the authentication of arbitrary users.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0107 Published 2014-08-26 No fix listed CWE-352

TI-2026-41452 CVE-2026-57626 · GHSA-fp5m-jrmh-93h3

WordPress MailPoet plugin 5.30.0-5.33.0 - Cross Site Request Forgery (CSRF) vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in MailPoet allows Cross Site Request Forgery.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00128 Published 2026-07-23 No fix listed CWE-352

TI-2018-14815 CVE-2018-20853 · GHSA-h8px-936j-jcgc

An issue was discovered in the MailPoet Newsletters (aka wysija-newsletters) plugin…

LOW 26

An issue was discovered in the MailPoet Newsletters (aka wysija-newsletters) plugin before 2.8.2 for WordPress.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00948 Published 2019-11-06 No fix listed

Open these records in search →

Critical	0
High	3
Medium	2
Low	0
No CVSS	0