Mailpoet Mailpoet Newsletters — known CVE vulnerabilities

Every CVE whose affected-product data names Mailpoet Mailpoet Newsletters, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2014-4725 — CVSS 7.5 (high): The MailPoet Newsletters (wysija-newsletters) plugin before 2.6.7 for WordPress allows remote attackers to bypass authentication and…
• CVE-2014-4726 — CVSS 7.5 (high): Unspecified vulnerability in the MailPoet Newsletters (wysija-newsletters) plugin before 2.6.8 for WordPress has unspecified impact and…
• CVE-2014-3907 — CVSS 6.8 (medium): Cross-site request forgery (CSRF) vulnerability in the MailPoet Newsletters (wysija-newsletters) plugin before 2.6.11 for WordPress allows…
• CVE-2018-20853 — CVSS 5.3 (medium): An issue was discovered in the MailPoet Newsletters (aka wysija-newsletters) plugin before 2.8.2 for WordPress. The plugin is vulnerable to…