Vulnerabilities

TI-2023-12966 CVE-2023-28421 · GHSA-hf9h-c8cv-r62j

WordPress WordPress Email Marketing Plugin – WP Email Capture Plugin <= 3.10 is vulnerable to Sensitive Data Exposure

MEDIUM 40

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Winwar Media WordPress Email Marketing Plugin – WP Email Capture.This issue affects WordPress Email Marketing Plugin – WP Email Capture: from n/…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00547 Published 2023-12-21 No fix listed CWE-200

TI-2023-09538 CVE-2023-23724 · GHSA-6q62-hhr2-mfm6

Cross-site request forgery in Winwar Media WP Email Capture

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Winwar Media WP Email Capture plugin <= 3.9.3 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00256 Published 2023-05-23 No fix listed CWE-352

TI-2023-09537 CVE-2023-23723 · GHSA-895m-p2wc-hxwf

Cross-site scripting in Winwar Media WP Email Capture

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Winwar Media WP Email Capture plugin <= 3.9.3 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00392 Published 2023-05-02 No fix listed CWE-79

TI-2023-09792 CVE-2023-24005 · GHSA-95v2-crcm-vvrh

WordPress Inline Tweet Sharer – Twitter Sharing Plugin Plugin <= 2.5.3 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Winwar Media Inline Tweet Sharer – Twitter Sharing Plugin plugin <= 2.5.3 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-04-25 No fix listed CWE-79

TI-2023-09536 CVE-2023-23722 · GHSA-rjwm-m8h8-cmqq

WordPress WP eBay Product Feeds Plugin <= 3.3.1 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Winwar Media WP eBay Product Feeds plugin <= 3.3.1 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00392 Published 2023-03-23 No fix listed CWE-79

TI-2023-09542 CVE-2023-23728 · GHSA-g5j2-jwp2-9p2h

WordPress WP Flipclock Plugin <= 1.7.4 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Winwar Media WP Flipclock plugin <= 1.7.4 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00393 Published 2023-03-23 No fix listed CWE-79

TI-2014-03712 CVE-2014-4525 · GHSA-rcwh-5c48-x5qx

Cross-site scripting (XSS) vulnerability in magpie/scripts/magpie_slashbox.php in the…

LOW 30

Cross-site scripting (XSS) vulnerability in magpie/scripts/magpie_slashbox.php in the Ebay Feeds for WordPress plugin 1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the r…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0118 Published 2019-12-27 No fix listed CWE-79

Vulnerabilities

Filters

WordPress WordPress Email Marketing Plugin – WP Email Capture Plugin <= 3.10 is vulnerable to Sensitive Data Exposure

Cross-site request forgery in Winwar Media WP Email Capture

Cross-site scripting in Winwar Media WP Email Capture

WordPress Inline Tweet Sharer – Twitter Sharing Plugin Plugin <= 2.5.3 is vulnerable to Cross Site Scripting (XSS)

WordPress WP eBay Product Feeds Plugin <= 3.3.1 is vulnerable to Cross Site Scripting (XSS)

WordPress WP Flipclock Plugin <= 1.7.4 is vulnerable to Cross Site Scripting (XSS)

Cross-site scripting (XSS) vulnerability in magpie/scripts/magpie_slashbox.php in the…