CVE-2023-35040

Mô tả

Tham khảo

• patchstack.com/database/vulnerability/sendpress/wordpress-sendpress-newsletters-plugin-1-22-3-31-broken-access-control-vulnerability · Third Party Advisory

Lỗ hổng khác của sendpress

• CVE-2024-1589TRUNG BÌNH 6.1The SendPress Newsletters WordPress plugin through 1.23.11.6 does not sanitise and escape some of its settings, which could allow high privi…
• CVE-2024-1588TRUNG BÌNH 6.8The SendPress Newsletters WordPress plugin through 1.23.11.6 does not sanitise and escape some of its settings, which could allow high privi…
• CVE-2023-47517TRUNG BÌNH 6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in SendPress Newsletters plugin <= 1.23.11.6 versions.
• CVE-2023-5660TRUNG BÌNH 5.4The SendPress Newsletters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up…
• CVE-2023-41730CAO 8.8Cross-Site Request Forgery (CSRF) vulnerability in SendPress Newsletters plugin <= 1.22.3.31 versions.