Mail Subscribe List

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-23657 May 16, 10:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Mail Subscribe List Webfwd

NVD

CVSS 3.1

5.4

EPSS

0.4%

CVE-2022-1603 Jun 20, 11:15 MEDIUM POC This Month

The Mail Subscribe List WordPress plugin before 2.1.4 does not have CSRF check in place when deleting subscribed users, which could allow attackers to make a logged in admin perform such action and. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress CSRF Mail Subscribe List Webfwd

NVD WPScan

CVSS 3.1

4.3

EPSS

0.4%

CVE-2023-23657

EPSS 0% CVSS 5.4

MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Mail Subscribe List Webfwd

NVD

CVE-2022-1603

EPSS 0% CVSS 4.3

MEDIUM POC This Month

WordPress CSRF Mail Subscribe List +1

NVD WPScan