Known vulnerabilities in WP-EMail
Vendor:
Lester 'GaMerZ' Chan
Software:
WP-EMail
Software CPE:
cpe:2.3:a:gamerz:wp-email:*:*:*:*:*:wordpress:*:*
Total vulnerabilities:
2
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU20692 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CWE-79 | Low | 2.67.3 | 02.09.2019 |
SB2016070702 |
||
| #VU19803 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
CWE-89 | High | 2.67.2 | 02.08.2019 |
SB2016051401 |