Medium
CVE-2024-32110
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 427
Reset filters
Medium
CVE-2024-31434
Newsletter <= 8.0.6 - Cross-Site Request Forgery
Medium
CVE-2024-31352
Email Subscribers & Newsletters <= 5.7.13 - Missing Authorization
Medium
CVE-2024-3058
ENL Newsletter <= 1.0.1 - Cross-Site Request Forgery
Medium
CVE-2024-3059
ENL Newsletter <= 1.0.1 - Cross-Site Request Forgery to Campaign Deletion
Medium
CVE-2024-31245
ConvertKit <= 2.4.5 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-2656
Icegram Express <= 5.7.14 - Authenticated (Administrator+) Cross-Site Scripting via CSV import
High
CVE-2024-2125
EnvíaloSimple: Email Marketing y Newsletters <= 2.3 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2024-31110
Contact Form 7 Newsletter <= 2.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-30503
Mailster <= 1.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-30430
Fluent CRM <= 2.8.44 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-30522
Newsletter <= 8.2.0 - IP Spoofing
Medium
CVE-2024-22300
Email Subscribers & Newsletters <= 5.7.11 - Reflected Cross-Site Scripting via campaign_id
Medium
CVE-2026-15297
Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) <= 3.1.77 - Reflected Cross-Site Scripting
Medium
CVE-2024-2392
Blocksy Companion <= 2.0.31 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-27960
Email Subscription Popup <= 1.2.20 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-1328
Newsletter2Go <= 4.0.14 - Authenticated(Subscriber+) Stored Cross-Site Scripting via style
High
CVE-2024-1793
AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth By AWeber <= 7.3.14 - Authenticated (Admin+) SQL Injection
Medium
5c24ee66-7b57-4e4c-bbb5-0451fc24ce4b
Newsletter <= 8.0.6 - Cross-Site Request Forgery
Medium
CVE-2023-52126
Send Users Email <= 1.4.3 - Sensitive Information Exposure via Error Logs
Medium
CVE-2023-51414
EnvíaloSimple <= 2.1 Unauthenticated PHP Object Injection
Medium
CVE-2023-51416
EnvíaloSimple <= 2.2 - Cross-Site Request Forgery
Medium
CVE-2023-50857
Automation By Autonami <= 2.6.1 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-6555
Email Subscription Popup <= 1.2.19 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.