CVE-2020-35933

概要

参考情報

• wordfence.com/blog/2020/08/newsletter-plugin-vulnerabilities-affect-over-300000-sites · Exploit

newsletter のその他の脆弱性

• CVE-2025-3582中 4.8The Newsletter WordPress plugin before 8.85 does not sanitise and escape some of its Form settings, which could allow high privilege users …
• CVE-2025-3581中 4.8The Newsletter WordPress plugin before 8.8.5 does not validate and escape some of its Widget options before outputting them back in a page/…
• CVE-2025-3584中 4.8The Newsletter WordPress plugin before 8.8.2 does not sanitise and escape some of its Subscription settings, which could allow high privile…
• CVE-2025-3583中 4.8The Newsletter WordPress plugin before 8.7.1 does not sanitise and escape some of its settings, which could allow high privilege users such…
• CVE-2024-5317中 6.1The Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'np1' parameter in all versions up to, and includin…