Medium
CVE-2024-56289
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 427
Reset filters
Medium
CVE-2025-24617
AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 9.11.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-24599
Newsletters <= 4.9.9.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-11636
Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.44 - Authenticated (Admin+) Stored Cross-Site Scripting via Text Block
Medium
CVE-2024-12566
Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.44 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-12568
Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.44 - Authenticated (Admin+) Stored Cross-Site Scripting via Workflow Settings
Medium
CVE-2024-12567
Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.44 - Authenticated (Admin+) Stored Cross-Site Scripting via Form Settings
Critical
CVE-2024-56205
AI Magic <= 1.0.4 - Unauthenticated Privilege Escalation
Medium
CVE-2024-12311
Email Subscribers by Icegram Express – Affordable, Powerful Email Marketing for WordPress & WooCommerce <= 5.7.43 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-54430
EELV Newsletter <= 4.8.2 - Cross-Site Request Forgery
Medium
CVE-2024-11683
Newsletter Subscriptions <= 2.1 - Reflected Cross-Site Scripting
Critical
CVE-2024-54273
Mail Picker <= 1.0.14 - Unauthenticated PHP Object Injection
Medium
CVE-2024-53784
Smart Marketing SMS and Newsletters Forms <= 5.0.4 - Missing Authorization
Medium
CVE-2024-53772
Mail Picker <= 1.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11195
Email Subscription Popup <= 1.2.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via print_email_subscribe_form Shortcode
Medium
CVE-2024-51802
Lead capture, gated content & newsletter opt-ins <= 7.4.857 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10471
Everest Forms <= 3.0.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-10103
MailPoet <= 5.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-10181
Newsletters <= 4.9.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via newsletters_video Shortcode
High
CVE-2024-9186
Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.2.2 - Unauthenticated SQL Injection
High
CVE-2024-49621
APA Register Newsletter Form <= 1.0.0 - Cross-Site Request Forgery to SQL Injection
Medium
CVE-2024-8477
Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) <= 3.1.87 - Cross-Site Request Forgery
Medium
CVE-2024-8254
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.34 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Medium
CVE-2024-47346
Newsletters <= 4.9.9.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.