Veille CVE

Recherche « Unknown Email Subscribers & Newsletters »

2 CVE

Critique 0 Élevée 1 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Email Subscribers & Newsletters » ✕
  1. CVE-2026-83555 5.3 Moyenne

    Unknown Email Subscribers & Newsletters

    The Email Subscribers & Newsletters WordPress plugin before 5.9.35 does not verify the per-subscriber management token before changing a subscriber's subscription status, allowing unauthenticated users to force-unsubscribe or force-confirm an arbitrary subscriber whose email address they know.

  2. CVE-2026-8089 7.1 Élevée

    Unknown weMail: Email Marketing, Email Automation, Newsletters, Subscribers & Email Optins for WooCommerce

    The weMail: Email Marketing, Email Automation, Newsletters, Subscribers & Email Optins for WooCommerce WordPress plugin before 2.1.3 does not properly escape a user-supplied parameter before reflecting it into an HTML attribute on a non-nonce-protected AJAX response, allowing unauthenticated attackers to deliver Reflected Cross-Site Scripting against any authenticated user (including administrators) via a crafted URL.