Read the docs
TI-2014-03180 Aliases CVE-2014-3907GHSA-p2r5-83hf-qcmc

Cross-site request forgery (CSRF) vulnerability in the MailPoet Newsletters…

Priority LOW 32CWE-352Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Tampering
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-352.

Summary

Cross-site request forgery (CSRF) vulnerability in the MailPoet Newsletters (wysija-newsletters) plugin before 2.6.11 for WordPress allows remote attackers to hijack the authentication of arbitrary users.

Why it matters now

EPSS 0.0107 65th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 73

CPEVersionsRoleVendor
cpe:2.3:a:mailpoet:mailpoet_newsletters:*:*:*:*:*:wordpress:*:*up to 2.6.10VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:0.9:*:*:*:*:wordpress:*:*0.9VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:0.9.1:*:*:*:*:wordpress:*:*0.9.1VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:0.9.2:*:*:*:*:wordpress:*:*0.9.2VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:0.9.6:*:*:*:*:wordpress:*:*0.9.6VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:1.0:*:*:*:*:wordpress:*:*1.0VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:1.0.1:*:*:*:*:wordpress:*:*1.0.1VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:1.1:*:*:*:*:wordpress:*:*1.1VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:1.1.1:*:*:*:*:wordpress:*:*1.1.1VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:1.1.2:*:*:*:*:wordpress:*:*1.1.2VulnerableMailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:*:*:*:*:*:wordpress:*:* Versions up to 2.6.10 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:0.9:*:*:*:*:wordpress:*:* Versions 0.9 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:0.9.1:*:*:*:*:wordpress:*:* Versions 0.9.1 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:0.9.2:*:*:*:*:wordpress:*:* Versions 0.9.2 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:0.9.6:*:*:*:*:wordpress:*:* Versions 0.9.6 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:1.0:*:*:*:*:wordpress:*:* Versions 1.0 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:1.0.1:*:*:*:*:wordpress:*:* Versions 1.0.1 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:1.1:*:*:*:*:wordpress:*:* Versions 1.1 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:1.1.1:*:*:*:*:wordpress:*:* Versions 1.1.1 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:1.1.2:*:*:*:*:wordpress:*:* Versions 1.1.2 Vulnerable ·MailPoet
Show 63 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:mailpoet:mailpoet_newsletters:1.1.3:*:*:*:*:wordpress:*:*1.1.3VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:1.1.4:*:*:*:*:wordpress:*:*1.1.4VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:1.1.5:*:*:*:*:wordpress:*:*1.1.5VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.0:*:*:*:*:wordpress:*:*2.0VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.0.1:*:*:*:*:wordpress:*:*2.0.1VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.0.2:*:*:*:*:wordpress:*:*2.0.2VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.0.3:*:*:*:*:wordpress:*:*2.0.3VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.0.4:*:*:*:*:wordpress:*:*2.0.4VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.0.5:*:*:*:*:wordpress:*:*2.0.5VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.0.6:*:*:*:*:wordpress:*:*2.0.6VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.0.7:*:*:*:*:wordpress:*:*2.0.7VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.0.8:*:*:*:*:wordpress:*:*2.0.8VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.0.9:*:*:*:*:wordpress:*:*2.0.9VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.0.9.5:*:*:*:*:wordpress:*:*2.0.9.5VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.1:*:*:*:*:wordpress:*:*2.1VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.1.1:*:*:*:*:wordpress:*:*2.1.1VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.1.2:*:*:*:*:wordpress:*:*2.1.2VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.1.3:*:*:*:*:wordpress:*:*2.1.3VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.1.4:*:*:*:*:wordpress:*:*2.1.4VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.1.5:*:*:*:*:wordpress:*:*2.1.5VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.1.6:*:*:*:*:wordpress:*:*2.1.6VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.1.7:*:*:*:*:wordpress:*:*2.1.7VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.1.8:*:*:*:*:wordpress:*:*2.1.8VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.1.9:*:*:*:*:wordpress:*:*2.1.9VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.2:*:*:*:*:wordpress:*:*2.2VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.2.1:*:*:*:*:wordpress:*:*2.2.1VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.2.2:*:*:*:*:wordpress:*:*2.2.2VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.2.3:*:*:*:*:wordpress:*:*2.2.3VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.3:*:*:*:*:wordpress:*:*2.3VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.3.1:*:*:*:*:wordpress:*:*2.3.1VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.3.2:*:*:*:*:wordpress:*:*2.3.2VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.3.3:*:*:*:*:wordpress:*:*2.3.3VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.3.4:*:*:*:*:wordpress:*:*2.3.4VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.3.5:*:*:*:*:wordpress:*:*2.3.5VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.4:*:*:*:*:wordpress:*:*2.4VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.4.1:*:*:*:*:wordpress:*:*2.4.1VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.4.2:*:*:*:*:wordpress:*:*2.4.2VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.4.3:*:*:*:*:wordpress:*:*2.4.3VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.4.4:*:*:*:*:wordpress:*:*2.4.4VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.5:*:*:*:*:wordpress:*:*2.5VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.5.1:*:*:*:*:wordpress:*:*2.5.1VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.5.2:*:*:*:*:wordpress:*:*2.5.2VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.5.3:*:*:*:*:wordpress:*:*2.5.3VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.5.4:*:*:*:*:wordpress:*:*2.5.4VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.5.5:*:*:*:*:wordpress:*:*2.5.5VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.5.7:*:*:*:*:wordpress:*:*2.5.7VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.5.8:*:*:*:*:wordpress:*:*2.5.8VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.5.9:*:*:*:*:wordpress:*:*2.5.9VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.5.9.1:*:*:*:*:wordpress:*:*2.5.9.1VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.5.9.2:*:*:*:*:wordpress:*:*2.5.9.2VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.5.9.3:*:*:*:*:wordpress:*:*2.5.9.3VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.5.9.4:*:*:*:*:wordpress:*:*2.5.9.4VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.6:*:*:*:*:wordpress:*:*2.6VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.6:beta:*:*:*:wordpress:*:*2.6 betaVulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.6.1:*:*:*:*:wordpress:*:*2.6.1VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.6.2:*:*:*:*:wordpress:*:*2.6.2VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.6.3:*:*:*:*:wordpress:*:*2.6.3VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.6.4:*:*:*:*:wordpress:*:*2.6.4VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.6.5:*:*:*:*:wordpress:*:*2.6.5VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.6.6:*:*:*:*:wordpress:*:*2.6.6VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.6.7:*:*:*:*:wordpress:*:*2.6.7VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.6.8:*:*:*:*:wordpress:*:*2.6.8VulnerableMailPoet
cpe:2.3:a:mailpoet:mailpoet_newsletters:2.6.9:*:*:*:*:wordpress:*:*2.6.9VulnerableMailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:1.1.3:*:*:*:*:wordpress:*:* Versions 1.1.3 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:1.1.4:*:*:*:*:wordpress:*:* Versions 1.1.4 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:1.1.5:*:*:*:*:wordpress:*:* Versions 1.1.5 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.0:*:*:*:*:wordpress:*:* Versions 2.0 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.0.1:*:*:*:*:wordpress:*:* Versions 2.0.1 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.0.2:*:*:*:*:wordpress:*:* Versions 2.0.2 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.0.3:*:*:*:*:wordpress:*:* Versions 2.0.3 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.0.4:*:*:*:*:wordpress:*:* Versions 2.0.4 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.0.5:*:*:*:*:wordpress:*:* Versions 2.0.5 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.0.6:*:*:*:*:wordpress:*:* Versions 2.0.6 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.0.7:*:*:*:*:wordpress:*:* Versions 2.0.7 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.0.8:*:*:*:*:wordpress:*:* Versions 2.0.8 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.0.9:*:*:*:*:wordpress:*:* Versions 2.0.9 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.0.9.5:*:*:*:*:wordpress:*:* Versions 2.0.9.5 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.1:*:*:*:*:wordpress:*:* Versions 2.1 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.1.1:*:*:*:*:wordpress:*:* Versions 2.1.1 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.1.2:*:*:*:*:wordpress:*:* Versions 2.1.2 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.1.3:*:*:*:*:wordpress:*:* Versions 2.1.3 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.1.4:*:*:*:*:wordpress:*:* Versions 2.1.4 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.1.5:*:*:*:*:wordpress:*:* Versions 2.1.5 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.1.6:*:*:*:*:wordpress:*:* Versions 2.1.6 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.1.7:*:*:*:*:wordpress:*:* Versions 2.1.7 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.1.8:*:*:*:*:wordpress:*:* Versions 2.1.8 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.1.9:*:*:*:*:wordpress:*:* Versions 2.1.9 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.2:*:*:*:*:wordpress:*:* Versions 2.2 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.2.1:*:*:*:*:wordpress:*:* Versions 2.2.1 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.2.2:*:*:*:*:wordpress:*:* Versions 2.2.2 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.2.3:*:*:*:*:wordpress:*:* Versions 2.2.3 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.3:*:*:*:*:wordpress:*:* Versions 2.3 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.3.1:*:*:*:*:wordpress:*:* Versions 2.3.1 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.3.2:*:*:*:*:wordpress:*:* Versions 2.3.2 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.3.3:*:*:*:*:wordpress:*:* Versions 2.3.3 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.3.4:*:*:*:*:wordpress:*:* Versions 2.3.4 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.3.5:*:*:*:*:wordpress:*:* Versions 2.3.5 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.4:*:*:*:*:wordpress:*:* Versions 2.4 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.4.1:*:*:*:*:wordpress:*:* Versions 2.4.1 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.4.2:*:*:*:*:wordpress:*:* Versions 2.4.2 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.4.3:*:*:*:*:wordpress:*:* Versions 2.4.3 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.4.4:*:*:*:*:wordpress:*:* Versions 2.4.4 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.5:*:*:*:*:wordpress:*:* Versions 2.5 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.5.1:*:*:*:*:wordpress:*:* Versions 2.5.1 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.5.2:*:*:*:*:wordpress:*:* Versions 2.5.2 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.5.3:*:*:*:*:wordpress:*:* Versions 2.5.3 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.5.4:*:*:*:*:wordpress:*:* Versions 2.5.4 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.5.5:*:*:*:*:wordpress:*:* Versions 2.5.5 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.5.7:*:*:*:*:wordpress:*:* Versions 2.5.7 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.5.8:*:*:*:*:wordpress:*:* Versions 2.5.8 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.5.9:*:*:*:*:wordpress:*:* Versions 2.5.9 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.5.9.1:*:*:*:*:wordpress:*:* Versions 2.5.9.1 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.5.9.2:*:*:*:*:wordpress:*:* Versions 2.5.9.2 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.5.9.3:*:*:*:*:wordpress:*:* Versions 2.5.9.3 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.5.9.4:*:*:*:*:wordpress:*:* Versions 2.5.9.4 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.6:*:*:*:*:wordpress:*:* Versions 2.6 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.6:beta:*:*:*:wordpress:*:* Versions 2.6 beta Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.6.1:*:*:*:*:wordpress:*:* Versions 2.6.1 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.6.2:*:*:*:*:wordpress:*:* Versions 2.6.2 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.6.3:*:*:*:*:wordpress:*:* Versions 2.6.3 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.6.4:*:*:*:*:wordpress:*:* Versions 2.6.4 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.6.5:*:*:*:*:wordpress:*:* Versions 2.6.5 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.6.6:*:*:*:*:wordpress:*:* Versions 2.6.6 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.6.7:*:*:*:*:wordpress:*:* Versions 2.6.7 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.6.8:*:*:*:*:wordpress:*:* Versions 2.6.8 Vulnerable ·MailPoet
  • cpe:2.3:a:mailpoet:mailpoet_newsletters:2.6.9:*:*:*:*:wordpress:*:* Versions 2.6.9 Vulnerable ·MailPoet

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2014-3907
  2. 2026-10-03 Alias added: GHSA-p2r5-83hf-qcmc

References

Patch 1

Advisory 2

  • TI-2014-03889 The MailPoet Newsletters (wysija-newsletters) plugin before 2.6.7 for WordPress allows… CVSS 2.0HIGH 7.5
  • TI-2014-03890 Unspecified vulnerability in the MailPoet Newsletters (wysija-newsletters) plugin before… CVSS 2.0HIGH 7.5
  • TI-2018-14815 An issue was discovered in the MailPoet Newsletters (aka wysija-newsletters) plugin… CVSS 3.1MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences