Vulnerabilities > Mailpoet
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2020-06-02 | CVE-2019-11843 | Cross-site Scripting vulnerability in Mailpoet The MailPoet plugin before 3.23.2 for WordPress allows remote attackers to inject arbitrary web script or HTML using extra parameters in the URL (Reflective Server-Side XSS). | 6.1 |
2019-11-06 | CVE-2018-20853 | Unspecified vulnerability in Mailpoet Newsletters An issue was discovered in the MailPoet Newsletters (aka wysija-newsletters) plugin before 2.8.2 for WordPress. | 5.3 |