Mailpoet Newsletters

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-4725 Jul 27, 18:55 HIGH POC PATCH THREAT Act Now

The MailPoet Newsletters (wysija-newsletters) plugin before 2.6.7 for WordPress allows remote attackers to bypass authentication and execute arbitrary PHP code by uploading a crafted theme using. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 81.8%.

PHP WordPress Authentication Bypass Mailpoet Wordpress Plugin +1

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

81.8%

Threat

5.5

CVE-2014-3907 Aug 26, 14:55 MEDIUM PATCH This Month

Cross-site request forgery (CSRF) vulnerability in the MailPoet Newsletters (wysija-newsletters) plugin before 2.6.11 for WordPress allows remote attackers to hijack the authentication of arbitrary. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

WordPress CSRF Mailpoet Wordpress Plugin Mailpoet Newsletters

NVD

CVSS 2.0

6.8

EPSS

0.1%

CVE-2014-4726 Jul 27, 18:55 HIGH PATCH This Week

Unspecified vulnerability in the MailPoet Newsletters (wysija-newsletters) plugin before 2.6.8 for WordPress has unspecified impact and attack vectors. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity.

WordPress Information Disclosure Mailpoet Wordpress Plugin Mailpoet Newsletters

NVD

CVSS 2.0

7.5

EPSS

0.4%

CVE-2014-4725

EPSS 82% 5.5 CVSS 7.5

HIGH POC PATCH THREAT Act Now

PHP WordPress Authentication Bypass +3

NVD Exploit-DB

CVE-2014-3907

EPSS 0% CVSS 6.8

MEDIUM PATCH This Month

WordPress CSRF Mailpoet +2

NVD

CVE-2014-4726

EPSS 0% CVSS 7.5

HIGH PATCH This Week

WordPress Information Disclosure Mailpoet +2

NVD