Kibokolabs Arigato Autoresponder And Newsletter
16 CVEs affecting Kibokolabs Arigato Autoresponder And Newsletter. Latest disclosed: 2023-11-16. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-18461 | Critical | 9.8 | 2018-10-18 | The Arigato Autoresponder and Newsletter (aka bft-autoresponder) v2.5.1.7 plugin for WordPress allows remote attackers to execute arbitrary code via PHP code i… |
CVE-2018-1002000 | High | 7.2 | 2018-12-03 | There is blind SQL injection in WordPress Arigato Autoresponder and Newsletter v2.5.1.8 These vulnerabilities require administrative privileges to exploit. The… |
CVE-2023-25020 | High | 7.1 | 2023-04-07 | Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.1.1 versions. |
CVE-2023-25061 | Medium | 6.5 | 2023-04-07 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.1.1 versions. |
CVE-2023-25031 | Medium | 5.9 | 2023-04-07 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.1 versions. |
CVE-2023-0543 | Medium | 4.8 | 2023-02-27 | The Arigato Autoresponder and Newsletter WordPress plugin before 2.1.7.2 does not sanitize and escape some of its settings, which could allow high-privilege us… |
CVE-2018-1002009 | Medium | 4.8 | 2018-12-03 | There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exp… |
CVE-2018-1002008 | Medium | 4.8 | 2018-12-03 | There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exp… |
CVE-2018-1002007 | Medium | 4.8 | 2018-12-03 | There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exp… |
CVE-2018-1002006 | Medium | 4.8 | 2018-12-03 | These vulnerabilities require administrative privileges to exploit. There is an XSS vulnerability in integration-contact-form.html.php:14: via POST request var… |
CVE-2018-1002005 | Medium | 4.8 | 2018-12-03 | These vulnerabilities require administrative privileges to exploit. There is an XSS vulnerability in bft_list.html.php:43: via the filter_signup_date parameter. |
CVE-2018-1002004 | Medium | 4.8 | 2018-12-03 | There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exp… |
CVE-2018-1002003 | Medium | 4.8 | 2018-12-03 | There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exp… |
CVE-2018-1002002 | Medium | 4.8 | 2018-12-03 | There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exp… |
CVE-2018-1002001 | Medium | 4.8 | 2018-12-03 | There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exp… |
CVE-2023-47686 | Medium | 4.3 | 2023-11-16 | Cross-Site Request Forgery (CSRF) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.2.2 versions. |