Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Winwar Media Component: Wp Email Capture Clear all filters
TI-2023-12966 CVE-2023-28421 · GHSA-hf9h-c8cv-r62j

WordPress WordPress Email Marketing Plugin – WP Email Capture Plugin <= 3.10 is vulnerable to Sensitive Data Exposure

Priority MEDIUM 40

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Winwar Media WordPress Email Marketing Plugin – WP Email Capture.This issue affects WordPress Email Marketing Plugin – WP Email Capture: from n/…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00547 Published 2023-12-21 No fix listed CWE-200
TI-2023-09537 CVE-2023-23723 · GHSA-895m-p2wc-hxwf

Cross-site scripting in Winwar Media WP Email Capture

Priority LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Winwar Media WP Email Capture plugin <= 3.9.3 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00392 Published 2023-05-02 No fix listed CWE-79