Xyzscripts

Newsletter Manager

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2020-36727

Exploit
  • EPSS 0.77%
  • Published 07.06.2023 02:15:12
  • Last modified 21.11.2024 05:30:10

The Newsletter Manager plugin for WordPress is vulnerable to insecure deserialization in versions up to, and including, 1.5.1. This is due to unsanitized input from the 'customFieldsDetails' parameter being passed through a deserialization function. ...

4.3

CVE-2012-6627

Exploit
  • EPSS 0.36%
  • Published 16.01.2014 21:55:44
  • Last modified 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in admin/test_mail.php in the Newsletter Manager plugin 1.0.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter.

4.3

CVE-2012-6628

Exploit
  • EPSS 0.31%
  • Published 16.01.2014 21:55:44
  • Last modified 11.04.2025 00:51:21

Multiple cross-site scripting (XSS) vulnerabilities in the Newsletter Manager plugin before 1.0.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) xyz_em_campName to admin/create_campaign.php or (2) admin/edit_c...

6.8

CVE-2012-6629

  • EPSS 0.13%
  • Published 16.01.2014 21:55:44
  • Last modified 11.04.2025 00:51:21

Multiple cross-site request forgery (CSRF) vulnerabilities in the Newsletter Manager plugin 1.0.2 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change an email address or (2) con...