5.3
CVE-2018-20853
- EPSS 0.95%
- Veröffentlicht 06.11.2019 20:15:09
- Zuletzt bearbeitet 21.11.2024 04:02:18
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMailPoet Newsletters <= 2.8.1 - Spam Injection
An issue was discovered in the MailPoet Newsletters (aka wysija-newsletters) plugin before 2.8.2 for WordPress. The plugin is vulnerable to SPAM attacks.
Mögliche Gegenmaßnahme
MailPoet Newsletters (Previous): Update to version 2.8.2, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mailpoet ≫ Mailpoet Newsletters SwPlatformwordpress Version < 2.8.2
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt
MailPoet Newsletters (Previous)
Version
*-2.8.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.95% | 0.565 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.3 | 3.9 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:P/A:N
|
https://wordpress.org/plugins/wysija-newsletters/#developers
https://www.wordfence.com/threat-intel/vulnerabilities/id/464a41f6-5569-4306-be99-566e2354c73b