Vulnerabilities

TI-2023-22150 CVE-2023-41735 · GHSA-62j9-6649-mj3h

WordPress Email posts to subscribers Plugin <= 6.2 is vulnerable to Sensitive Data Exposure

LOW 34

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gopi Ramasamy Email posts to subscribers.This issue affects Email posts to subscribers: from n/a through 6.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00667 Published 2023-11-30 No fix listed CWE-200

TI-2022-23164 CVE-2022-46818 · GHSA-q7cf-3m6j-h72f

WordPress Email posts to subscribers Plugin <= 6.2 is vulnerable to SQL Injection

MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Gopi Ramasamy Email posts to subscribers allows SQL Injection.This issue affects Email posts to subscribers: from n/a…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00652 Published 2023-11-03 No fix listed CWE-89

TI-2023-22151 CVE-2023-41736 · GHSA-44mr-jq2g-p4xf

WordPress Email posts to subscribers Plugin <= 6.2 is vulnerable to Cross Site Scripting (XSS)

LOW 26

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Email posts to subscribers plugin <= 6.2 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00362 Published 2023-10-02 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Email posts to subscribers Plugin <= 6.2 is vulnerable to Sensitive Data Exposure

WordPress Email posts to subscribers Plugin <= 6.2 is vulnerable to SQL Injection

WordPress Email posts to subscribers Plugin <= 6.2 is vulnerable to Cross Site Scripting (XSS)