WP Plugin Wysija Newsletters

A WordPress plugin is a piece of software that plugs into your WordPress site. Plugins can add new functionality or extend existing functionality on your site allowing you to create virtually any kind of website from ecommerce stores to portfolios to directory sites.

Official Site:

https://wordpress.org/plugins/wysija-newsletters

Severity Summary:

Critical: 3 Medium: 6 Information: 2

Reference

Title

Severity

CVE-2013-1408

WordPress Plugin MailPoet Newsletters (Previous) SQL Injection

Critical

CVE-2014-4725

WordPress Plugin MailPoet Newsletters (Previous) Arbitrary File Upload

Critical

CVE-2014-4726

WordPress Plugin MailPoet Newsletters (Previous) Arbitrary File Upload

Critical

CVE-2012-3414

WordPress Plugin MailPoet Newsletters (Previous) swfupload.swf Cross-Site Scripting

Medium

CVE-2014-3907

WordPress Plugin MailPoet Newsletters (Previous) Cross-Site Request Forgery

Medium

No CVE number

WordPress Plugin MailPoet Newsletters (Previous) Cross-Site Scripting

Medium

No CVE number

WordPress Plugin MailPoet Newsletters (Previous) Cross-Site Scripting

Medium

No CVE number

WordPress Plugin MailPoet Newsletters (Previous) Multiple Vulnerabilities

Medium

CVE-2018-20853

WordPress Plugin MailPoet Newsletters (Previous) Security Bypass

Medium

No CVE number

WordPress Plugin MailPoet Newsletters (Previous) Multiple Unspecified Vulnerabilities

Information

No CVE number

WordPress Plugin MailPoet Newsletters (Previous) Unspecified Vulnerability

Information