Plugin: Instant Popup Builder – Powerful Popup Maker for Opt-ins, Email Newsletters & Lead Generation
Versions: <= 1.1.7
CVSS: 5.3/10
Correctif: 1.1.8

18 mars 2026

Lire

MoyenneCVSS 6.5

CVE-2026-1651

Injection SQL, authentifié (Abonné+), dans Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress (<= 5.9.16)

Plugin: Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress
Versions: <= 5.9.16
CVSS: 6.5/10
Correctif: 5.9.17

Défaut de contrôle d'accès dans Subscribe2 – Form, Email Subscribers & Newsletters (<= 10.44)

Plugin: Subscribe2 – Form, Email Subscribers & Newsletters
Versions: <= 10.44
CVSS: 5.3/10
Correctif: 10.45

Injection d'objet PHP, non authentifié, dans Newsletters (<= 4.11)

Plugin: Newsletters
Versions: <= 4.11
CVSS: 8.1/10
Correctif: 4.12

XSS stocké, authentifié (Contributeur+), dans Newsletters (<= 4.12)

Plugin: Newsletters
Versions: <= 4.12
CVSS: 6.4/10
Correctif: 4.13

Faille de sécurité, non authentifié, dans Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress (<= 5.9.10)

Plugin: Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress
Versions: <= 5.9.10
CVSS: 5.3/10
Correctif: 5.9.11

Injection SQL, authentifié, dans Groundhogg — CRM, Newsletters, and Marketing Automation (<= 4.2.6.1)

Plugin: Groundhogg — CRM, Newsletters, and Marketing Automation
Versions: <= 4.2.6.1
CVSS: 4.9/10
Correctif: 4.2.7

Faille de sécurité, non authentifié, dans Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress (<= 5.9.10)

Plugin: Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress
Versions: <= 5.9.10
CVSS: 5.3/10
Correctif: 5.9.11

Injection d'objet PHP, authentifié (Abonné+), dans Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress (<= 5.9.10)

Plugin: Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress
Versions: <= 5.9.10
CVSS: 6.6/10
Correctif: 5.9.11

XSS stocké, authentifié (Contributeur+), dans Groundhogg — CRM, Newsletters, and Marketing Automation (<= 4.2.6)

Plugin: Groundhogg — CRM, Newsletters, and Marketing Automation
Versions: <= 4.2.6
CVSS: 6.4/10
Correctif: 4.2.6.1

31 oct. 2025

Lire

13 – 24 sur 141 articles