Eelv Newsletter Project Eelv Newsletter — known CVE vulnerabilities

Every CVE whose affected-product data names Eelv Newsletter Project Eelv Newsletter, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2017-18523 — CVSS 8.8 (high): The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book.
• CVE-2017-18522 — CVSS 6.1 (medium): The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book.
• CVE-2013-10028 — CVSS 3.5 (low): A vulnerability was found in EELV Newsletter Plugin 2.x on WordPress. It has been rated as problematic. Affected by this issue is the…