thenewsletterplugin kayıtları

thenewsletterplugin üreticisine ait 10 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %40
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')10

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

10 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
26İzleyin	CVE-2020-35933İstismar yok	A Reflected Authenticated Cross-Site Scripting (XSS) vulnerability in the Newsletter plugin before 6.8.2 for WordPress allows remote attackethenewsletterplugin · newsletter · CWE-79 XSS	Orta6,5	—	%0,8	31 Ara 2020
25İzleyin	CVE-2022-1756Kavram kanıtı	Newsletter < 7.4.5 - Reflected Cross-Site Scriptingthenewsletterplugin · newsletter · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%1,9	13 Haz 2022
24İzleyin	CVE-2023-27922Kavram kanıtı	Cross-site scripting vulnerability in Newsletter versions prior to 7.6.9 allows a remote unauthenticated attacker to inject an arbitrary scrthenewsletterplugin · newsletter · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%1,1	22 May 2023
24İzleyin	CVE-2024-5317İstismar yok	Newsletter <= 8.3.4 - Unauthenticated Stored Cross-Site Scripting via np1thenewsletterplugin · newsletter · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,2	4 Haz 2024
21İzleyin	CVE-2023-4772İstismar yok	Newsletter <= 7.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodethenewsletterplugin · newsletter · CWE-79 XSS	Orta5,4	—	%0,5	6 Eyl 2023
19İzleyin	CVE-2022-1889İstismar yok	Newsletter < 7.4.6 - Admin+ Stored Cross-Site Scriptingthenewsletterplugin · newsletter · CWE-79 XSS	Orta4,8	—	%0,5	20 Haz 2022
19İzleyin	CVE-2025-3583İstismar yok	Newsletter < 8.7.1 - Admin+ Stored XSSthenewsletterplugin · newsletter · CWE-79 XSS	Orta4,8	—	%0,3	5 May 2025
19İzleyin	CVE-2025-3581İstismar yok	Newsletter < 8.8.5 - Admin+ Stored XSS via Widgetthenewsletterplugin · newsletter · CWE-79 XSS	Orta4,8	—	%0,2	9 Haz 2025
19İzleyin	CVE-2025-3582İstismar yok	Newsletter < 8.8.5 - Admin+ Stored XSS via Formthenewsletterplugin · newsletter · CWE-79 XSS	Orta4,8	—	%0,2	9 Haz 2025
19İzleyin	CVE-2025-3584İstismar yok	Newsletter < 8.8.2 - Admin+ Stored XSS via Subscriptionthenewsletterplugin · newsletter · CWE-79 XSS	Orta4,8	—	%0,2	3 Haz 2025

CVE-2020-35933
26İzleyin
A Reflected Authenticated Cross-Site Scripting (XSS) vulnerability in the Newsletter plugin before 6.8.2 for WordPress allows remote attacke
OrtaCVSS 6,5İstismar yokEPSS %0
- XSS
thenewsletterplugin · newsletter31 Ara 2020
CVE-2022-1756
25İzleyin
Newsletter < 7.4.5 - Reflected Cross-Site Scripting
OrtaCVSS 6,1Kavram kanıtıEPSS %1
- Kimlik doğrulamasız
- XSS
thenewsletterplugin · newsletter13 Haz 2022
CVE-2023-27922
24İzleyin
Cross-site scripting vulnerability in Newsletter versions prior to 7.6.9 allows a remote unauthenticated attacker to inject an arbitrary scr
OrtaCVSS 6,1Kavram kanıtıEPSS %1
- Kimlik doğrulamasız
- XSS
thenewsletterplugin · newsletter22 May 2023
CVE-2024-5317
24İzleyin
Newsletter <= 8.3.4 - Unauthenticated Stored Cross-Site Scripting via np1
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
thenewsletterplugin · newsletter4 Haz 2024
CVE-2023-4772
21İzleyin
Newsletter <= 7.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
thenewsletterplugin · newsletter6 Eyl 2023
CVE-2022-1889
19İzleyin
Newsletter < 7.4.6 - Admin+ Stored Cross-Site Scripting
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
thenewsletterplugin · newsletter20 Haz 2022
CVE-2025-3583
19İzleyin
Newsletter < 8.7.1 - Admin+ Stored XSS
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
thenewsletterplugin · newsletter5 May 2025
CVE-2025-3581
19İzleyin
Newsletter < 8.8.5 - Admin+ Stored XSS via Widget
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
thenewsletterplugin · newsletter9 Haz 2025
CVE-2025-3582
19İzleyin
Newsletter < 8.8.5 - Admin+ Stored XSS via Form
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
thenewsletterplugin · newsletter9 Haz 2025
CVE-2025-3584
19İzleyin
Newsletter < 8.8.2 - Admin+ Stored XSS via Subscription
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
thenewsletterplugin · newsletter3 Haz 2025