Vulnerabilities

TI-2023-25824 CVE-2023-47686 · GHSA-7x2q-44vg-c7fh

WordPress Arigato Autoresponder and Newsletter Plugin <= 2.7.2.2 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.2.2 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00261 Published 2023-11-16 No fix listed CWE-352

TI-2023-10493 CVE-2023-25020 · GHSA-wf3p-x594-p2w8

WordPress Arigato Autoresponder and Newsletter Plugin <= 2.7.1.1 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.1.1 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00406 Published 2023-04-07 No fix listed CWE-79

TI-2023-10504 CVE-2023-25031 · GHSA-7r66-58vf-pw2f

WordPress Arigato Autoresponder and Newsletter Plugin <= 2.7.1 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.1 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00394 Published 2023-04-07 No fix listed CWE-79

TI-2023-10533 CVE-2023-25061 · GHSA-q4w7-p77w-r38f

WordPress Arigato Autoresponder and Newsletter Plugin <= 2.7.1.1 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.1.1 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00383 Published 2023-04-07 No fix listed CWE-79

TI-2023-00514 CVE-2023-0543 · GHSA-qvc8-j43h-xvpp

Arigato Autoresponder and Newsletter < 2.1.7.2 - Admin+ Stored XSS

MEDIUM 55

The Arigato Autoresponder and Newsletter WordPress plugin before 2.1.7.2 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting atta…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00465 Published 2023-02-27 Fixed in 2.1.7.2

TI-2018-16124 CVE-2018-1002009 · GHSA-f4m7-984x-2j9p

Cross-site scripting in prasunsen Arigato Autoresponder and Newsletter

LOW 27

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.02604 Published 2018-12-03 No fix listed CWE-79

TI-2018-16123 CVE-2018-1002008 · GHSA-5m9r-9h7v-p67q

Cross-site scripting in prasunsen Arigato Autoresponder and Newsletter

LOW 27

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.02582 Published 2018-12-03 No fix listed CWE-79

TI-2018-16122 CVE-2018-1002007 · GHSA-cg22-m5xf-vmfv

Cross-site scripting in prasunsen Arigato Autoresponder and Newsletter

LOW 27

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.02582 Published 2018-12-03 No fix listed CWE-79

TI-2018-16121 CVE-2018-1002006 · GHSA-3gv4-2fhp-6ghv

Cross-site scripting in prasunsen Arigato Autoresponder and Newsletter

LOW 27

These vulnerabilities require administrative privileges to exploit.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.02582 Published 2018-12-03 No fix listed CWE-79

TI-2018-16120 CVE-2018-1002005 · GHSA-xg9p-gw4f-gxg2

Cross-site scripting in prasunsen Arigato Autoresponder and Newsletter

LOW 28

These vulnerabilities require administrative privileges to exploit.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.03142 Published 2018-12-03 No fix listed CWE-79

TI-2018-16119 CVE-2018-1002004 · GHSA-chjh-wjmc-rp5v

Cross-site scripting in prasunsen Arigato Autoresponder and Newsletter

LOW 27

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.02923 Published 2018-12-03 No fix listed CWE-79

TI-2018-16118 CVE-2018-1002003 · GHSA-wgq6-j6rq-j32p

Cross-site scripting in prasunsen Arigato Autoresponder and Newsletter

LOW 27

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.02923 Published 2018-12-03 No fix listed CWE-79

TI-2018-16117 CVE-2018-1002002 · GHSA-g4c5-892w-93p4

Cross-site scripting in prasunsen Arigato Autoresponder and Newsletter

LOW 27

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.02923 Published 2018-12-03 No fix listed CWE-79

TI-2018-16116 CVE-2018-1002001 · GHSA-7f47-54gh-37fv

Cross-site scripting in prasunsen Arigato Autoresponder and Newsletter

LOW 27

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.02948 Published 2018-12-03 No fix listed CWE-79

TI-2018-16115 CVE-2018-1002000 · GHSA-xhcp-hwcp-p5wq

SQL injection in prasunsen Arigato Autoresponder and Newsletter

LOW 39

There is blind SQL injection in WordPress Arigato Autoresponder and Newsletter v2.5.1.8 These vulnerabilities require administrative privileges to exploit.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.04354 Published 2018-12-03 No fix listed CWE-89

TI-2018-13057 CVE-2018-18461 · GHSA-frx7-v62v-c7q3

The Arigato Autoresponder and Newsletter (aka bft-autoresponder) v2.5.1.7 plugin for…

MEDIUM 49

The Arigato Autoresponder and Newsletter (aka bft-autoresponder) v2.5.1.7 plugin for WordPress allows remote attackers to execute arbitrary code via PHP code in attachments[] data to models/attachment.php.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04184 Published 2018-10-18 No fix listed CWE-94

Vulnerabilities

Filters