Plugin icon

EnvíaloSimple: Email Marketing y Newsletters

envialosimple-email-marketing-y-newsletters-gratis

Vulnerabilities:

5

Last Updated:

May 27, 2026

Active Installs:

2000

Published
Title
Fixed in
CVSS
Published
2026-05-26
Title
EnvíaloSimple: Email Marketing y Newsletters <= 2.4.5 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
Fixed in
No known fix
CVSS
4.9 (medium)
Published
2024-04-16
Title
EnvíaloSimple: Email Marketing y Newsletters < 2.3 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.3
CVSS
6.1 (medium)
Published
2024-04-01
Title
EnvíaloSimple: Email Marketing y Newsletters < 2.4 - Arbitrary File Upload via CSRF
Fixed in
Fixed in 2.4
CVSS
8.8 (high)
Published
2023-12-27
Title
EnvíaloSimple < 2.3 - API Key Update via CSRF
Fixed in
Fixed in 2.3
CVSS
4.3 (medium)
Published
2023-12-27
Title
EnvíaloSimple < 2.2 Unauthenticated PHP Object Injection
Fixed in
Fixed in 2.2
CVSS
6.5 (medium)