VendorsEnl Newsletter Plugin Projectenl-newsletterall versions
Vulnerabilities

Enl Newsletter Plugin Project ENL Newsletter (enl-newsletter) plugin for WordPress

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2014-4939
SQL injection vulnerability in the ENL Newsletter (enl-newsletter) plugin 1.0.1 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the enl-add-new page to wp-admin/admin.php.
Published 2014-07-11 · Modified
6.51 PoCEPSS 0.023
CVE-2024-3059
ENL Newsletter <= 1.0.1 - Campaign Deletion via CSRF
Published 2024-04-26 · Analyzed
5.7EPSS 0.003
CVE-2024-3058
ENL Newsletter <= 1.0.1 - Stored XSS via CSRF
Published 2024-04-26 · Analyzed
5.4EPSS 0.002
CVE-2024-3060
ENL Newsletter <= 1.0.1 - Admin+ SQL Injection
Published 2024-04-26 · Analyzed
4.5EPSS 0.005