Vulnerabilities

TI-2024-06876 CVE-2024-7420 · GHSA-jj8g-cqhp-wxj6

Insert PHP Code Snippet <= 1.3.6 - Cross-Site Request Forgery to Code Snippet Activate/Deactivate/Deletion

LOW 28

The Insert PHP Code Snippet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.6.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00247 Published 2024-08-15 No fix listed CWE-352

TI-2020-18898 CVE-2020-36727 · GHSA-xj95-mhv8-mh4r

Newsletter Manager <= 1.5.1 - Insecure Deserialization

MEDIUM 52

The Newsletter Manager plugin for WordPress is vulnerable to insecure deserialization in versions up to, and including, 1.5.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01615 Published 2023-06-07 No fix listed CWE-502

TI-2017-14120 CVE-2017-20054 · GHSA-5jqm-r8hj-prg8

XYZScripts Contact Form Manager Plugin cross site scriting

MEDIUM 58

A vulnerability was found in XYZScripts Contact Form Manager Plugin.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0084 Published 2022-06-16 No fix listed CWE-80

TI-2017-14119 CVE-2017-20053 · GHSA-vpmc-j5g3-84g8

XYZScripts Contact Form Manager Plugin cross-site request forgery

MEDIUM 53

A vulnerability was found in XYZScripts Contact Form Manager Plugin.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00594 Published 2022-06-16 No fix listed CWE-352

TI-2012-05347 CVE-2012-6629 · GHSA-5j2v-qvwv-54xv

Multiple cross-site request forgery (CSRF) vulnerabilities in the Newsletter Manager…

LOW 32

Multiple cross-site request forgery (CSRF) vulnerabilities in the Newsletter Manager plugin 1.0.2 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) chan…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00986 Published 2014-01-16 No fix listed CWE-352

TI-2012-05346 CVE-2012-6628 · GHSA-c73p-5jgr-p72m

Multiple cross-site scripting (XSS) vulnerabilities in the Newsletter Manager plugin…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in the Newsletter Manager plugin before 1.0.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) xyz_em_campName to admin/create_ca…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02058 Published 2014-01-16 No fix listed CWE-79

TI-2012-05345 CVE-2012-6627 · GHSA-g27w-3hm7-2hhh

Cross-site scripting (XSS) vulnerability in admin/test_mail.php in the Newsletter Manager…

LOW 23

Cross-site scripting (XSS) vulnerability in admin/test_mail.php in the Newsletter Manager plugin 1.0.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01649 Published 2014-01-16 No fix listed CWE-79