CVE-2014-4939

概要

参考情報

• codevigilant.com/disclosure/wp-plugin-enl-newsletter-a1-injection · Exploit

enl-newsletter のその他の脆弱性

• CVE-2024-3060中 4.5The ENL Newsletter WordPress plugin through 1.0.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admi…
• CVE-2024-3059中 5.7The ENL Newsletter WordPress plugin through 1.0.1 does not have CSRF checks in some places, which could allow attackers to make logged in ad…
• CVE-2024-3058中 5.4The ENL Newsletter WordPress plugin through 1.0.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, …