Stefano Lissa & The Newsletter Team

Products

ProductCVEsExploitedLatest
Newsletter3–May 17, 2024

Exploited and recent CVEs

  • CVE-2024-30522 Medium 5.3 WordPress Newsletter plugin <= 8.2.0 - IP Blacklist Bypass vulnerability 0.5%
  • CVE-2024-31434 Medium 5.4 WordPress Newsletter plugin <= 8.0.6 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2023-27922 Unrated Cross-site scripting vulnerability in Newsletter versions prior to 7.6.9 allows a remote unauthenticated attacker to inject an arbitrary script. 1.2%