Vulnerabilities

TI-2024-21474 CVE-2024-32587 · GHSA-fqxg-rg6w-xg23

WordPress EnvíaloSimple plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EnvialoSimple EnvíaloSimple allows Reflected XSS.This issue affects EnvíaloSimple: from n/a through 2.2.

CVSS 3.1MEDIUM 5.8 Network No auth User interaction EPSS 0.00288 Published 2024-04-18 No fix listed CWE-79

TI-2023-28070 CVE-2023-51416 · GHSA-24jp-gg22-pxj3

WordPress EnvíaloSimple plugin <= 2.2 - Cross Site Request Forgery (CSRF) vulnerability

LOW 28

Cross-Site Request Forgery (CSRF) vulnerability in EnvialoSimple EnvíaloSimple.This issue affects EnvíaloSimple: from n/a through 2.2.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0024 Published 2024-03-26 No fix listed CWE-352

TI-2023-28068 CVE-2023-51414 · GHSA-6p7c-wj96-hf8h

WordPress EnvíaloSimple Plugin <= 2.1 is vulnerable to PHP Object Injection

MEDIUM 43

Deserialization of Untrusted Data vulnerability in EnvialoSimple EnvíaloSimple: Email Marketing y Newsletters.This issue affects EnvíaloSimple: Email Marketing y Newsletters: from n/a through 2.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00565 Published 2023-12-29 No fix listed CWE-502

TI-2014-03714 CVE-2014-4527 · GHSA-j7x3-25rm-f77v

Multiple cross-site scripting (XSS) vulnerabilities in paginas/vista-previa-form.php in…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in paginas/vista-previa-form.php in the EnvialoSimple: Email Marketing and Newsletters (envialosimple-email-marketing-y-newsletters-gratis) plugin before 1.98 for WordP…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01618 Published 2014-07-02 No fix listed CWE-79

Vulnerabilities

Filters

WordPress EnvíaloSimple plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress EnvíaloSimple plugin <= 2.2 - Cross Site Request Forgery (CSRF) vulnerability

WordPress EnvíaloSimple Plugin <= 2.1 is vulnerable to PHP Object Injection

Multiple cross-site scripting (XSS) vulnerabilities in paginas/vista-previa-form.php in…