Enl Newsletter (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-04-26. Vendor: Unknown.

CVEs of Enl Newsletter

• CVE-2024-3059 - CVSS 5.7 (medium), 2024-04-26: The ENL Newsletter WordPress plugin through 1.0.1 does not have CSRF checks in some places, which could allow attackers to make logged in admins delete…
• CVE-2024-3058 - CVSS 5.4 (medium), 2024-04-26: The ENL Newsletter WordPress plugin through 1.0.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow…
• CVE-2024-3060 - CVSS 4.5 (medium), 2024-04-26: The ENL Newsletter WordPress plugin through 1.0.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admin+ to perform SQL…