WordPress Plugin Vulnerabilities

Email Templates < 1.3.1 - HTML Injection

Description

The Email Templates WordPress plugin was affected by a HTML Injection security vulnerability.

Affects Plugins

Plugin icon
email-templates
Fixed in 1.3.1

References

CVE
CVE-2019-25150
URL
https://blog.nintechnet.com/multiple-wordpress-plugins-vulnerable-to-html-injection/

Miscellaneous

Original Researcher
Jerome Bruandet
Verified
No
WPVDB ID
53f96124-7aff-409c-bf3f-3f5ed5c85a93

Timeline

Publicly Published
2019-10-25 (about 6 years ago)
Added
2019-10-25 (about 6 years ago)
Last Updated
2023-06-08 (about 2 years ago)

Other

Published
Title
Published
2016-09-20
Title
WP Support Plus Responsive Ticket System < 7.1.0 - Insecure Direct Object Reference
Published
2019-07-01
Title
Easy Forms for Mailchimp < 6.5.3 - Code Injection
Published
2024-04-05
Title
s2Member < 240325 - Limited Privilege Escalation
Published
2018-08-21
Title
Ninja Forms <= 3.3.13 - CSV Injection
Published
2016-12-21
Title
trMedia for WordPress <= 4.2 - Unspecified Issues