WordPress Plugin Vulnerabilities

EELV Newsletter < 4.6.1 - CSRF & XSS

Description

The EELV Newsletter WordPress plugin was affected by a CSRF & XSS security vulnerability.

Affects Plugins

Plugin icon
eelv-newsletter
Fixed in 4.6.1

References

CVE
CVE-2017-18522
CVE
CVE-2017-18523

Miscellaneous

Verified
No
WPVDB ID
5f984119-9597-4543-84c5-dd2d8dd0400f

Timeline

Publicly Published
2017-05-18 (about 8 years ago)
Added
2019-08-24 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2020-01-14
Title
Real Estate 7 < 2.9.5 - Multiple Vulnerabilities
Published
2020-06-15
Title
KingComposer < 2.9.4 - Multiple Critical Issues
Published
2015-05-19
Title
FeedWordPress < 2015.0514 - XSS & SQL-Injection
Published
2019-06-15
Title
Dropshix < 4.0.14 - Arbitrary Product Import
Published
2018-06-15
Title
Ultimate Form Builder Lite <= 1.3.7 - Multiple Vulnerabilities