Stefano Lissa & The Newsletter Team Vulnerabilities and Affected Products
Vulnerabilities associated with Newsletter.
Products
Clear product- Newsletter3 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-30522MEDIUM | WordPress Newsletter plugin <= 8.2.0 - IP Blacklist Bypass vulnerabilityAuthentication Bypass by Spoofing vulnerability in Stefano Lissa & The Newsletter Team Newsletter allows Functionality Bypass.This issue affects Newsletter: from n/a through 8.2.0. CWE-290May 17, 2024 | CVSS5.3v3.1 | EPSS0.494% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-31434MEDIUM | WordPress Newsletter plugin <= 8.0.6 - Cross Site Request Forgery (CSRF) vulnerabilityCross-Site Request Forgery (CSRF) vulnerability in Stefano Lissa & The Newsletter Team Newsletter.This issue affects Newsletter: from n/a through 8.0.6. CWE-352Apr 15, 2024 | CVSS5.4v3.1 | EPSS0.197% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-27922MEDIUM | Newsletter < 7.6.9 - Cross-Site ScriptingCross-site scripting vulnerability in Newsletter versions prior to 7.6.9 allows a remote unauthenticated attacker to inject an arbitrary script. | CVSS6.1v3.1 | EPSS1.2% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |