Medium
CVE-2024-8771
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 427
Reset filters
Critical
CVE-2024-44012
WP Newsletter Subscription <= 1.1 - Unauthenticated Local File Inclusion
Medium
CVE-2024-8628
Popup, Optin Form & Email Newsletters for Mailchimp, HubSpot, AWeber – MailOptin <= 1.2.70.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-8247
Newsletters <= 4.9.9.2 - Authenticated Privilege Escalation
High
CVE-2024-7384
AcyMailing <= 9.7.2 - Authenticated (Subscriber+) Arbitrary File Upload via acym_extractArchive Function
Medium
CVE-2024-43279
Newsletters <= 4.9.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-43287
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.82 - Cross-Site Request Forgery
Medium
CVE-2024-7411
Newsletters <= 4.9.9 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-43238
weMail <= 1.14.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-43126
Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.6.15 - Reflected Cross-Site Scripting
Medium
CVE-2024-8542
Everest Forms <= 3.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-39657
Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.6.18 - Cross-Site Request Forgery
Medium
CVE-2024-5703
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.26 - Missing Authorization
Medium
CVE-2024-38760
Send Users Email <= 1.5.1 - Unauthenticated Information Exposure
Critical
CVE-2024-6172
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.25 - Unauthenticated SQL Injection via unsubscribe
Medium
CVE-2024-37456
Noptin <= 3.4.2 - Missing Authorization to Unauthenticated Form Submission
Medium
CVE-2024-37475
Newspack Newsletters <= 2.13.2 - Missing Authorization
Medium
CVE-2024-37433
Mailster <= 4.0.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-37264
Groundhogg <= 3.4.2.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-37235
Groundhogg <= 3.4.2.3 - Cross-Site Request Forgery
Medium
CVE-2024-37242
Newspack Newsletters <= 2.13.2 - Cross-Site Request Forgery
Medium
CVE-2024-37227
Newsletters <= 4.9.7 - Cross-Site Request Forgery
Medium
CVE-2024-37220
Optinly <= 1.0.18 - Missing Authorization
Critical
CVE-2024-5756
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.23 - Unauthenticated SQL Injection via optin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.