Mailjet Email Marketing
Monthly
Remote unauthenticated attackers can access sensitive information on WordPress sites running the Mailjet Email Marketing plugin version 6.2.3 or earlier. The flaw, rated CVSS 5.3, stems from insertion of sensitive data into sent responses (CWE-201), affecting confidentiality only; no public exploit code or confirmed active exploitation has been identified at time of analysis. Exploitation requires only that the vulnerable plugin be installed and network-reachable, as the CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms remote, low-complexity, unauthenticated access with no user interaction.
Remote unauthenticated attackers can access sensitive information on WordPress sites running the Mailjet Email Marketing plugin version 6.2.3 or earlier. The flaw, rated CVSS 5.3, stems from insertion of sensitive data into sent responses (CWE-201), affecting confidentiality only; no public exploit code or confirmed active exploitation has been identified at time of analysis. Exploitation requires only that the vulnerable plugin be installed and network-reachable, as the CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms remote, low-complexity, unauthenticated access with no user interaction.