Known vulnerabilities in Email Subscribers & Newsletters

Vendor: icegram
Software CPE: cpe:2.3:a:niravmehta:email_subscribers_newsletters:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Email Subscribers & Newsletters Email Subscribers & Newsletters is affected by 12 known vulnerabilities: 3 high, 4 medium, 5 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU46643 - Improper Access Control
CVE-2020-5780
CWE-284 Medium
No
No
4.5.6 11.09.2020 SB2020091110
#VU31680 - Cross-Site Request Forgery (CSRF)
CVE-2020-5767
CWE-352 Low
No
No
4.5.1 20.07.2020 SB2020072003
#VU31679 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-5768
CWE-89 Low
No
No
4.5.1 20.07.2020 SB2020072003
#VU22768 - Improper Access Control
CWE-284 Medium
No
No
4.2.3 14.11.2019 SB2019111414
#VU22767 - Improper Access Control
CWE-284 High
No
No
4.2.3 14.11.2019 SB2019111414
#VU22766 - Cross-Site Request Forgery (CSRF)
CWE-352 Low
No
No
4.2.3 14.11.2019 SB2019111414
#VU22765 - Permissions, Privileges, and Access Controls
CWE-264 Medium
No
No
4.2.3 14.11.2019 SB2019111414
#VU22764 - Improper Access Control
CWE-284 Medium
No
No
4.2.3 14.11.2019 SB2019111414
#VU22763 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 High
No
No
4.3.1 14.11.2019 SB2019111413
#VU19521 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0602
CWE-79 Low
No
No
3.5.0 29.07.2019 SB2018062608
#VU19520 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-14364
CWE-79 Low
No
No
4.1.7 29.07.2019 SB2019072803
#VU19311 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-13569
CWE-89 High
No
No
4.1.8 23.07.2019 SB2019072214