Jontasc Sailthru Triggermail — known CVE vulnerabilities

Every CVE whose affected-product data names Jontasc Sailthru Triggermail, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2024-4290 — CVSS 7.1 (high): The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape some of its settings, which could allow high privilege…
• CVE-2024-11141 — CVSS 6.1 (medium): The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape some of its settings and is missing CSRF protection…
• CVE-2024-4289 — CVSS 6.1 (medium): The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape various parameters before outputting them back in pages…