Wp Email Capture

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-28421 MEDIUM This Month

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Winwar Media WordPress Email Marketing Plugin - WP Email Capture.10. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure WordPress Wp Email Capture

NVD

CVSS 3.1

5.3

EPSS

0.6%

CVE-2023-23724 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in Winwar Media WP Email Capture plugin <= 3.9.3 versions. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Wp Email Capture

NVD

CVSS 3.1

8.8

EPSS

0.3%

CVE-2023-23723 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Wp Email Capture

NVD

CVSS 3.1

4.8

EPSS

0.4%

CVE-2023-28421

EPSS 1% CVSS 5.3

MEDIUM This Month

Information Disclosure WordPress Wp Email Capture

NVD

CVE-2023-23724

EPSS 0% CVSS 8.8

HIGH This Week

CSRF Wp Email Capture

NVD

CVE-2023-23723

EPSS 0% CVSS 4.8

MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Wp Email Capture

NVD