| Package | Affected versions | Patched versions |
|---|---|---|
| email subscribers & newsletters | < 4.2.3 | 4.2.3 |
The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed for unauthenticated option creation. In order to exploit this vulnerability, an attacker would need to send a /wp-admin/admin-post.php?es_skip=1&option_name= request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free