Kibokolabs Arigato Autoresponder And Newsletter — known CVE vulnerabilities

Every CVE whose affected-product data names Kibokolabs Arigato Autoresponder And Newsletter, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (16)

• CVE-2018-18461 — CVSS 9.8 (critical): The Arigato Autoresponder and Newsletter (aka bft-autoresponder) v2.5.1.7 plugin for WordPress allows remote attackers to execute arbitrary…
• CVE-2018-1002000 — CVSS 7.2 (high): There is blind SQL injection in WordPress Arigato Autoresponder and Newsletter v2.5.1.8 These vulnerabilities require administrative…
• CVE-2023-25020 — CVSS 7.1 (high): Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.1.1 versions.
• CVE-2023-25061 — CVSS 6.5 (medium): Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.1.1…
• CVE-2023-25031 — CVSS 5.9 (medium): Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.1 versions.
• CVE-2018-1002005 — CVSS 4.8 (medium): These vulnerabilities require administrative privileges to exploit. There is an XSS vulnerability in bft_list.html.php:43: via the…
• CVE-2018-1002006 — CVSS 4.8 (medium): These vulnerabilities require administrative privileges to exploit. There is an XSS vulnerability in integration-contact-form.html.php:14…
• CVE-2018-1002007 — CVSS 4.8 (medium): There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires…
• CVE-2018-1002009 — CVSS 4.8 (medium): There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires…
• CVE-2023-0543 — CVSS 4.8 (medium): The Arigato Autoresponder and Newsletter WordPress plugin before 2.1.7.2 does not sanitize and escape some of its settings, which could…
• CVE-2018-1002008 — CVSS 4.8 (medium): There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires…
• CVE-2018-1002001 — CVSS 4.8 (medium): There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires…
• CVE-2018-1002002 — CVSS 4.8 (medium): There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires…
• CVE-2018-1002003 — CVSS 4.8 (medium): There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires…
• CVE-2018-1002004 — CVSS 4.8 (medium): There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires…
• CVE-2023-47686 — CVSS 4.3 (medium): Cross-Site Request Forgery (CSRF) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.2.2 versions.