Mndpsingh287

Newsletter Popup

4 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2024-3643

Exploit
  • EPSS 0.33%
  • Veröffentlicht 16.05.2024 06:15:10
  • Zuletzt bearbeitet 09.01.2026 21:16:10

The Newsletter Popup WordPress plugin through 1.2 does not have CSRF check when deleting list, which could allow attackers to make logged in admins perform such action via a CSRF attack

4.8

CVE-2024-3644

Exploit
  • EPSS 0.17%
  • Veröffentlicht 16.05.2024 06:15:10
  • Zuletzt bearbeitet 19.05.2025 14:32:20

The Newsletter Popup WordPress plugin through 1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disal...

6.9

CVE-2024-3642

Exploit
  • EPSS 0.21%
  • Veröffentlicht 16.05.2024 06:15:09
  • Zuletzt bearbeitet 19.05.2025 14:33:12

The Newsletter Popup WordPress plugin through 1.2 does not have CSRF check when deleting subscriber, which could allow attackers to make logged in admins perform such action via a CSRF attack

6.1

CVE-2024-3641

Exploit
  • EPSS 0.41%
  • Veröffentlicht 16.05.2024 06:15:08
  • Zuletzt bearbeitet 19.05.2025 14:33:38

The Newsletter Popup WordPress plugin through 1.2 does not sanitise and escape some parameters, which could allow unauthenticated visitors to perform Cross-Site Scripting attacks against admins