Description

WordPress Plugin MailPoet Newsletters (Previous) is prone to multiple unspecified vulnerabilities. No available information exists regarding these issues and their impact on a vulnerable website. WordPress Plugin MailPoet Newsletters (Previous) version 2.7.1 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 2.7.2 or latest

References

https://wordpress.org/plugins/wysija-newsletters/changelog/

Related Vulnerabilities

LimeSurvey Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2019-16187)

WordPress Plugin TC Custom JavaScript Cross-Site Scripting (1.2.1)

MySQL CVE-2019-2826 Vulnerability (CVE-2019-2826)

Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-2289)

WordPress Plugin Category Order and Taxonomy Terms Order PHP Object Injection (1.5.2.2)

Severity

High

Tags

Missing Update