Magento Advanced Newsletter — known CVE vulnerabilities

Every CVE whose affected-product data names Magento Advanced Newsletter, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2014-1634 — CVSS 9.8 (critical): SQL Injection exists in Advanced Newsletter Magento extension before 2.3.5 via the /store/advancednewsletter/index/subscribeajax/an_category…