WordPress Plugin Vulnerabilities

EELV Newsletter 3.4.3 - lettreinfo.php Unspecified XSS

Description

The EELV Newsletter WordPress plugin was affected by a lettreinfo.php Unspecified XSS security vulnerability.

Affects Plugins

Plugin icon
eelv-newsletter
Fixed in 3.5.0

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
e92f3384-2d64-48ed-bec0-2b090d64f0b2

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2024-08-20
Title
Envira Gallery < 1.8.15 - Author+ Stored XSS
Published
2024-09-12
Title
Product Slider for WooCommerce < 1.13.51 - Reflected Cross-Site Scripting
Published
2024-12-06
Title
워드프레스 결제 심플페이 – 우커머스 결제 플러그인 < 5.2.3 - Reflected Cross-Site Scripting via add_query_arg Function
Published
2025-09-22
Title
Widget Options - Extended < 5.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-06-25
Title
Royal Elementor Addons < 1.7.1025 - Contributor+ Stored DOM-Based XSS via Multiple Widgets