CVE-2019-20361

概要

参考情報

• packetstormsecurity.com/files/158568/WordPress-Email-Subscribers-And-Newsletters-4.2.2-SQL-Injection.html · Exploit
• wpvulndb.com/vulnerabilities/9947 · Third Party Advisory
• wordfence.com/blog/2019/11/multiple-vulnerabilities-patched-in-email-subscribers-newsletters-plugin · Exploit

email subscribers & newsletters のその他の脆弱性

• CVE-2024-12568中 4.8The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of its Workflow settings, which c…
• CVE-2024-12567中 4.8The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of its form settings, which could…
• CVE-2024-12566中 4.8The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of form settings, which could all…
• CVE-2024-11636中 4.8The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of its Text Block options, which …
• CVE-2024-12311中 6.5The Email Subscribers by Icegram Express WordPress plugin before 5.7.44 does not sanitize and escape a parameter before using it in a SQL s…