WordPress Plugin Vulnerabilities

Email Subscribers & Newsletters < 2.9.1 - Multiple XSS & SQLi

Description

The Email Subscribers & Newsletters – Simple and Effective Email Marketing WordPress Plugin WordPress plugin was affected by a Multiple XSS & SQLi security vulnerability.

Affects Plugins

Plugin icon
email-subscribers
Fixed in 2.9.1

References

URL
http://cinu.pl/research/wp-plugins/mail_185d6ddc306e732c75d254fbb8819730.html
URL
http://blog.cinu.pl/2015/11/php-static-code-analysis-vs-top-1000-wordpress-plugins.html

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
0855d8fe-4439-42c5-b7a3-dfc4f7b94231

Timeline

Publicly Published
2015-08-10 (about 10 years ago)
Added
2015-11-24 (about 10 years ago)
Last Updated
2020-08-07 (about 5 years ago)

Other

Published
Title
Published
2019-06-24
Title
Custom CSS Pro <= 1.0.3 - CSRF & XSS
Published
2015-07-11
Title
CP Contact Form with Paypal <= 1.1.5 - Multiple Vulnerabilities
Published
2014-12-12
Title
WP-ViperGB 1.3.10 - XSS Weakness & CSRF
Published
2015-02-02
Title
Feed Them Social < 1.7.0 - XSS & Arbitrary Shortcode Execution
Published
2016-01-19
Title
Download Manager <= 2.8.7 - Multiple Vulnerabilities