Advisories · Technology

Yamna Khawaja Mailing Group Listserv.

Every CVE that names Yamna Khawaja Mailing Group Listserv among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-50036 CVE record

CVSS 6.5 Medium

WordPress Mailing Group Listserv plugin <= 3.0.5 - Cross Site Request Forgery (CSRF) Vulnerability
- Yamna Khawaja Mailing Group Listserv
- Cross-site request forgery (CSRF)
Not analysed yet 20 Jun 2025
CVE-2025-46463 CVE record

CVSS 8.5 High

WordPress Mailing Group Listserv plugin <= 3.0.4 - SQL Injection Vulnerability
- Yamna Khawaja Mailing Group Listserv
- SQL injection
Not analysed yet 23 May 2025
CVE-2025-22527 CVE record

CVSS 7.6 High

WordPress Mailing Group Listserv Plugin <= 2.0.9 - SQL Injection vulnerability
- Yamna Khawaja Mailing Group Listserv
- SQL injection
Not analysed yet 9 Jan 2025
CVE-2025-22595 CVE record

CVSS 7.1 High

WordPress Mailing Group Listserv Plugin <= 2.0.9 - Reflected Cross Site Scripting (XSS) vulnerability
- Yamna Khawaja Mailing Group Listserv
- Cross-site scripting (XSS)
Not analysed yet 9 Jan 2025