Vulnerabilities > Mailpoet

DATE CVE VULNERABILITY TITLE RISK
2020-06-02 CVE-2019-11843 Cross-site Scripting vulnerability in Mailpoet
The MailPoet plugin before 3.23.2 for WordPress allows remote attackers to inject arbitrary web script or HTML using extra parameters in the URL (Reflective Server-Side XSS).
network
low complexity
mailpoet CWE-79
6.1
2019-11-06 CVE-2018-20853 Unspecified vulnerability in Mailpoet Newsletters
An issue was discovered in the MailPoet Newsletters (aka wysija-newsletters) plugin before 2.8.2 for WordPress.
network
low complexity
mailpoet
5.3