WordPress Plugin Vulnerabilities
Newsletter Manager <= 1.5.1 - Unauthenticated Insecure Deserialisation
Description
The plugin is affected by an insecure deserialisation issue, which could lead to an unauthenticated PHP object injection (when a suitable gadget chain is present)
Affects Plugins
No known fix - plugin closed
References
Classification
Miscellaneous
Original Researcher
Jerome Bruander (nintechnet)
Verified
No
Timeline
Publicly Published
2020-12-29 (about 2 years ago)
Added
2020-12-29 (about 2 years ago)
Last Updated
2020-12-30 (about 2 years ago)