Vulnerabilities

TI-2013-06171 CVE-2013-10028 · GHSA-7cmx-pq9m-76p5

EELV Newsletter Plugin lettreinfo.php style_newsletter cross site scripting

LOW 28

A vulnerability was found in EELV Newsletter Plugin 2.x on WordPress.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00546 Published 2023-06-04 No fix listed CWE-79

TI-2017-13696 CVE-2017-18523 · GHSA-2q6j-qv6q-3722

LOW 39

The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00674 Published 2019-08-20 No fix listed CWE-352

TI-2017-13695 CVE-2017-18522 · GHSA-j59f-mm66-w5rj

LOW 29

The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00905 Published 2019-08-20 No fix listed CWE-79