CVE-2019-14788

概要

参考情報

• wordpress.org/plugins/newsletters-lite · Release Notes
• wpvulndb.com/vulnerabilities/9447 · Third Party Advisory
• pluginvulnerabilities.com/2019/07/02/there-is-also-an-authenticated-remote-code-execution-rce-vulnerability-in-newsletters · Exploit

newsletters のその他の脆弱性

• CVE-2025-4857高 7.2The Newsletters plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.9.9 via the 'file' para…
• CVE-2024-13739中 6.1The Newsletters plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the "to" parameter in all versions up to, and inclu…
• CVE-2024-10181中 6.4The Newsletters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's newsletters_video shortcode in all versio…
• CVE-2024-8247高 8.8The Newsletters plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.9.9.2. This is due to the…
• CVE-2024-37227高 8.8Cross Site Request Forgery (CSRF) vulnerability in Tribulant Newsletters.This issue affects Newsletters: from n/a through 4.9.7.