Enl Newsletter Plugin Project Enl-newsletter — known CVE vulnerabilities

Every CVE whose affected-product data names Enl Newsletter Plugin Project Enl-newsletter, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2014-4939 — CVSS 6.5 (medium): SQL injection vulnerability in the ENL Newsletter (enl-newsletter) plugin 1.0.1 for WordPress allows remote authenticated administrators to…
• CVE-2024-3059 — CVSS 5.7 (medium): The ENL Newsletter WordPress plugin through 1.0.1 does not have CSRF checks in some places, which could allow attackers to make logged in…
• CVE-2024-3058 — CVSS 5.4 (medium): The ENL Newsletter WordPress plugin through 1.0.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping…
• CVE-2024-3060 — CVSS 4.5 (medium): The ENL Newsletter WordPress plugin through 1.0.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing…