Easyuse Mailhunter Ultimate — known CVE vulnerabilities

Every CVE whose affected-product data names Easyuse Mailhunter Ultimate, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2023-34207 — CVSS 9.9 (critical): Unrestricted upload of file with dangerous type vulnerability in create template function in EasyUse MailHunter Ultimate 2023 and earlier…
• CVE-2022-35223 — CVSS 9.8 (critical): EasyUse MailHunter Ultimate’s cookie deserialization function has an inadequate validation vulnerability. Deserializing a cookie…
• CVE-2023-34210 — CVSS 7.7 (high): SQL Injection in create customer group function in EasyUse MailHunter Ultimate 2023 and earlier allow remote authenticated users to execute…
• CVE-2023-34208 — CVSS 6.5 (medium): Path Traversal in create template function in EasyUse MailHunter Ultimate 2023 and earlier allow remote authenticated users to extract…
• CVE-2023-34209 — CVSS 5.0 (medium): Exposure of Sensitive System Information to an Unauthorized Control Sphere in create template function in EasyUse MailHunter Ultimate 2023…