Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: MailPoet Component: Mailpoet Newsletters Clear all filters
TI-2014-03180 CVE-2014-3907 · GHSA-p2r5-83hf-qcmc

Cross-site request forgery (CSRF) vulnerability in the MailPoet Newsletters…

Priority LOW 32

Cross-site request forgery (CSRF) vulnerability in the MailPoet Newsletters (wysija-newsletters) plugin before 2.6.11 for WordPress allows remote attackers to hijack the authentication of arbitrary users.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0107 Published 2014-08-26 No fix listed CWE-352