CVE-2023-23723: winwar wp email capture – CVSS 4.8 · Watchpost

← All vulnerabilities

CVE-2023-23723

中危 4.8CVE-2023-23723 · Published 02/05/2023 · updated 17/06/2026

要点

CVE-2023-23723 是影响 wp email capture (winwar) 的中危 (CVSS 4.8)漏洞。
未来 30 天内被利用的概率（EPSS）：0.39%，高于 33.5% 的漏洞。
修复：升级到 3.10 或更高版本。

Package	Affected versions	Patched versions
wp email capture winwar	`< 3.10`	`3.10`

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Winwar Media WP Email Capture plugin <= 3.9.3 versions.

References

patchstack.com/database/vulnerability/wp-email-capture/wordpress-wordpress-email-marketing-plugin-wp-email-capture-plugin-3-9-3-cross-site-scripting-xss-vulnerability · Third Party Advisory

wp email capture 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free