Vulnerabilities in Stefano Lissa & The Newsletter Team

3 results

CVE-2023-27922—Cross-site scripting vulnerability in Newsletter versions prior to 7.6.9 allows a remote unauthenticated attacker to inject an arbitrary scrEPSS 1.2%CVE-2024-30522MEDIUMWordPress Newsletter plugin <= 8.2.0 - IP Blacklist Bypass vulnerabilityEPSS 0.5%CVE-2024-31434MEDIUMWordPress Newsletter plugin <= 8.0.6 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%