WordPress Plugin Vulnerabilities
BlossomThemes Email Newsletter < 2.2.5 - Missing Authorization
Description
The BlossomThemes Email Newsletter plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the bten_get_mailing_list function in versions up to, and including, 2.2.4. This makes it possible for unauthenticated attackers to obtain a mailing list.
Affects Plugins
Fixed in 2.2.5 References
Classification
Type
NO AUTHORISATION
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Abdi Pranata
Verified
No
WPVDB ID
Timeline
Publicly Published
2023-11-20 (about 2 years ago)
Added
2023-11-29 (about 2 years ago)
Last Updated
2024-01-22 (about 2 years ago)
WPScan 