Enl Newsletter Plugin Project Enl-Newsletter
4 CVEs affecting Enl Newsletter Plugin Project Enl-Newsletter. Latest disclosed: 2024-04-26. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-3059 | Medium | 5.7 | 2024-04-26 | The ENL Newsletter WordPress plugin through 1.0.1 does not have CSRF checks in some places, which could allow attackers to make logged in admins delete arbitra… |
CVE-2024-3058 | Medium | 5.4 | 2024-04-26 | The ENL Newsletter WordPress plugin through 1.0.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow a… |
CVE-2024-3060 | Medium | 4.5 | 2024-04-26 | The ENL Newsletter WordPress plugin through 1.0.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admin+ to perform SQL i… |
CVE-2014-4939 | | 2014-07-11 | SQL injection vulnerability in the ENL Newsletter (enl-newsletter) plugin 1.0.1 for WordPress allows remote authenticated administrators to execute arbitrary S… |