WordPress News Articles
Wordpress Newsletter Email Subscribe vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Cross-Site Request Forgery Vulnerability in Newsletter Email Subscribe Plugin for WordPress
CVE-2025-14904WordPressNewsletter Email Subsc...4.3MEDIUMMissing Authorization Vulnerability in Icegram Express Plugin for WordPress
CVE-2025-12348WordPressEmail Subscribers & Ne...5.3MEDIUMObject Injection Vulnerability in Icegram Email Subscribers & Newsletters
CVE-2025-66055WordPressEmail Subscribers & Ne...7.2HIGHAuthorization Flaw in Icegram Express Email Subscribers Plugin for WordPress
CVE-2025-12349WordPressEmail Subscribers & Ne...5.3MEDIUMStored Cross-Site Scripting Vulnerability in Subscribe2 Plugin for WordPress
CVE-2024-11582WordPressSubscribe2 – Form, Ema...7.2HIGHFreemius SDK Vulnerabilities Affect Hundreds of WordPress Plugins and Themes
CVE-2022-4974WordpressYasr – Yet Another Sta...6.3MEDIUMCross-Site Request Forgery Vulnerability Affects Brevo Plugin for WordPress
CVE-2024-8477WordpressNewsletter, Smtp, Emai...4.3MEDIUMArbitrary Shortcode Execution Vulnerability in Email Subscribers
CVE-2024-8254WordpressEmail Subscribers By I...6.3MEDIUMUnauthorized Access to Sensitive Data in Email Subscribers Plugin
CVE-2024-8771WordpressEmail Subscribers By I...4.3MEDIUMSendinblue CSRF vulnerability affects Newsletter, SMTP, Email marketing and Subscribe forms
CVE-2024-43287WordPressNewsletter, Smtp, Emai...8.8HIGHUnauthorized API Access Vulnerability in Email Subscribers for WordPress & WooCommerce
CVE-2024-5703WordpressEmail Subscribers By I...4.3MEDIUMSQL Injection Vulnerability in Icegram Express Email Marketing Plugin for WordPress & WooCommerce
CVE-2024-6172WordpressEmail Subscribers \& N...9.8CRITICALSQL Injection Vulnerability Affects Email Subscribers & Newsletters
CVE-2024-37252WordPressEmail Subscribers & Ne...9.3CRITICALEmail Subscribers Vulnerable to Time-Based SQL Injection
CVE-2024-5756WordpressEmail Subscribers By I...9.8CRITICALUnauthorized Modification of Data in ConvertKit Plugin Due to Missing Capability Check
CVE-2024-3961WordpressConvertkit – Email New...5.3MEDIUMEmail Subscribers Plugin Vulnerable to SQL Injection
CVE-2024-4295WordpressEmail Subscribers \& N...💰👾EPSS 93%📰9.8CRITICALSendinblue Brevo Vulnerable to Reflected XSS Attacks
CVE-2024-35668WordPressNewsletter, Smtp, Emai...6.1MEDIUMUnauthorized Access to Private and Password-Protected Posts in Email Subscribers Plugin
CVE-2024-3626WordpressEmail Subscribers By I...4.3MEDIUMEmail Subscribers Plugin Vulnerable to Data Theft and Loss
CVE-2024-4010WordpressEmail Subscribers By I...8.8HIGHEmail Subscribers Vulnerable to SQL Injection
CVE-2024-2876WordpressEmail Subscribers By I...👾🟡EPSS 91%9.8CRITICALEmail Subscribers Vulnerable to Stored Cross-Site Scripting
CVE-2024-2656WordpressEmail Subscribers By I...4.4MEDIUMCross-site Scripting Vulnerability Affects Email Subscribers & Newsletters
CVE-2024-22300WordPressEmail Subscribers & Ne...7.1HIGHUnauthorized Email Access in Subscribe2 Plugin for WordPress
CVE-2023-1844WordpressSubscribe2 – Form, Ema...4.3MEDIUMCross-Site Request Forgery in Subscribe2 Plugin for WordPress
CVE-2023-3407WordPressSubscribe2 – Form, Ema...4.3MEDIUMNewsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.61 - Reflected XSS
CVE-2023-2472WordpressNewsletter, Smtp, Emai...6.1MEDIUM