Vulnerabilities > CVE-2018-20987 - Deserialization of Untrusted Data vulnerability in Tribulant Newsletters

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
tribulant
CWE-502

Summary

The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection.

Common Weakness Enumeration (CWE)