aweber records
3 published records for vendor aweber.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 33.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2023-47757No exploit | WordPress AWeber Plugin <= 7.3.9 is vulnerable to Broken Access Controlaweber · aweber · CWE-352 | High8.8 | — | 0.2% | Nov 17, 2023 |
28Monitor | CVE-2024-1793No exploit | AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth By AWeber <= 7.3.14 - Authenticated (Admin+) SQL Injeaweber · aweber – free sign up form and landing page builder plugin for lead generation and email newsletter growth · CWE-89 | High7.2 | — | 0.8% | Mar 13, 2024 |
19Monitor | CVE-2024-13313No exploit | AWeber <= 7.3.20 - Admin+ Stored XSSaweber · aweber · CWE-79 | Medium4.8 | — | 0.3% | May 15, 2025 |
- CVE-2023-4775735Monitor
WordPress AWeber Plugin <= 7.3.9 is vulnerable to Broken Access Control
HighCVSS 8.8No exploitEPSS 0%aweber · aweberNov 17, 2023
- CVE-2024-179328Monitor
AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth By AWeber <= 7.3.14 - Authenticated (Admin+) SQL Inje
HighCVSS 7.2No exploitEPSS 0%aweber · aweber – free sign up form and landing page builder plugin for lead generation and email newsletter growthMar 13, 2024
- CVE-2024-1331319Monitor
AWeber <= 7.3.20 - Admin+ Stored XSS
MediumCVSS 4.8No exploitEPSS 0%aweber · aweberMay 15, 2025