contrid

Records36All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high16CVSS 7.0–8.9

Exploited now

contrid records in CISA KEV

No contrid vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Newsletters 11 records HIGH Slideshow Gallery 8 records MEDIUM Newsletter 1 record MEDIUM One Click Ssl 1 record LOW Tibulant Slideshow Gallery 1 record HIGH

Records

1 record in Newsletter · all components

TI-2020-18375 CVE-2020-35932 · GHSA-v5ff-x4w5-hjhp

Insecure Deserialization in the Newsletter plugin before 6.8.2 for WordPress allows…

MEDIUM 42

Insecure Deserialization in the Newsletter plugin before 6.8.2 for WordPress allows authenticated remote attackers with minimal privileges (such as subscribers) to use the tpnc_render AJAX action to inject arbitrary PHP…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02108 Published 2021-01-01 No fix listed CWE-502

Open these records in search →

Critical	3
High	16
Medium	17
Low	0
No CVSS	0