Mail Subscribe List

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-23657 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Mail Subscribe List

NVD

CVSS 3.1

5.4

EPSS

0.4%

CVE-2022-1603 MEDIUM POC This Month

The Mail Subscribe List WordPress plugin before 2.1.4 does not have CSRF check in place when deleting subscribed users, which could allow attackers to make a logged in admin perform such action and. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CSRF WordPress Mail Subscribe List

NVD WPScan

CVSS 3.1

4.3

EPSS

0.4%

CVE-2023-23657

EPSS 0% CVSS 5.4

MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Mail Subscribe List

NVD

CVE-2022-1603

EPSS 0% CVSS 4.3

MEDIUM POC This Month

CSRF WordPress Mail Subscribe List

NVD WPScan