WordPress Plugin Vulnerabilities

ALO EasyMail Newsletter <= 2.6.00 - Cross-Site Scripting (XSS) & CSRF

Description

The ALO EasyMail Newsletter WordPress plugin was affected by a Cross-Site Scripting (XSS) & CSRF security vulnerability.

Affects Plugins

Plugin icon
alo-easymail
Fixed in 2.6.01

References

CVE
CVE-2015-9409
URL
https://packetstormsecurity.com/files/#133594/

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
Yes
WPVDB ID
0e843e84-9c22-4c16-81b4-7a9cdcc8072e

Timeline

Publicly Published
2015-09-17 (about 10 years ago)
Added
2015-09-17 (about 10 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2014-08-01
Title
s&box - Arbitrary File Upload/FD
Published
2014-10-01
Title
Refraction Theme Multiple Vulnerabilities (XSS, FPD)
Published
2014-09-27
Title
Wordfence 5.2.3 - Multiple Vulnerabilities
Published
2014-10-07
Title
Wordfence <= 5.2.4 - Multiple Vulnerabilities (XSS & Bypasses)
Published
2014-09-27
Title
Mingle Forum 1.0.28 - XSS & FPD