Advisories · Technology
contrid Newsletters.
Every CVE that names contrid Newsletters among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Newsletters <= 4.18.1 - Authenticated (Subscriber+) SQL Injection via 'id' Parameter
- contrid Newsletters
- SQL injection
- CVSS 4.3 Medium
Newsletters <= 4.17 - Missing Authorization to Authenticated (Author+) Arbitrary Modification via 'newsletters_mailinglistsroles' POST Parameter
- contrid Newsletters
- Broken access control
- CVSS 6.4 Medium
Newsletters <= 4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Shortcode Attribute
- contrid Newsletters
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Newsletters <= 4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'target' Shortcode Attribute
- contrid Newsletters
- Cross-site scripting (XSS)
- CVSS 7.5 High
Newsletters <= 4.13 - Unauthenticated SQL Injection via wpmlsubscriber_id Parameter
- contrid Newsletters
- SQL injection
- CVSS 7.2 High
Newsletters <= 4.9.9.9 - Authenticated (Administrator+) Local File Inclusion
- contrid Newsletters
- Path traversal
- CVSS 6.5 Medium
Newsletters <= 4.9.9.8 - Authenticated (Contributor+) SQL Injection orderby Parameter
- contrid Newsletters
- SQL injection
- CVSS 7.2 High
Newsletters <= 4.9.9.7 - Unauthenticated Stored Cross-Site Scripting
- contrid Newsletters
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Newsletters <= 4.9.9.7 - Reflected Cross-Site Scripting via To Parameter
- contrid Newsletters
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Newsletters <= 4.9.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via newsletters_video Shortcode
- contrid Newsletters
- Cross-site scripting (XSS)
- CVSS 8.8 High
Newsletters <= 4.9.9.2 - Authenticated Privilege Escalation
- contrid Newsletters
- Privilege escalation
- CVSS 5.3 Medium
Newsletters <= 4.9.9 - Unauthenticated Full Path Disclosure
- contrid Newsletters
- Information disclosure