CVE-2019-14788

Description

References

• wordpress.org/plugins/newsletters-lite · Release Notes
• wpvulndb.com/vulnerabilities/9447 · Third Party Advisory
• pluginvulnerabilities.com/2019/07/02/there-is-also-an-authenticated-remote-code-execution-rce-vulnerability-in-newsletters · Exploit

Más vulnerabilidades de newsletters

• CVE-2025-4857ALTO 7.2The Newsletters plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.9.9 via the 'file' para…
• CVE-2024-13739MEDIO 6.1The Newsletters plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the "to" parameter in all versions up to, and inclu…
• CVE-2024-10181MEDIO 6.4The Newsletters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's newsletters_video shortcode in all versio…
• CVE-2024-8247ALTO 8.8The Newsletters plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.9.9.2. This is due to the…
• CVE-2024-37227ALTO 8.8Cross Site Request Forgery (CSRF) vulnerability in Tribulant Newsletters.This issue affects Newsletters: from n/a through 4.9.7.