GCVE - cpe:2.3:a:borbis:freshmail_for_wordpress:*:*:*:*:*:wordpress:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:borbis:freshmail_for_wordpress:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Borbis (`113003a7-6acd-5adf-a48f-fe93cc385e54`)
Product	Freshmail For Wordpress (`0c96c926-eb63-5f44-af30-107ab9d549c8`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-22304`	vulnerable	2026-06-08 06:29:34.474146	WordPress FreshMail For WordPress Plugin <= 2.3.2 is vulnerable to Cross Site Request Forgery (CSRF) MEDIUM (5.4) Cross-Site Request Forgery (CSRF) vulnerability in Borbis Media FreshMail For WordPress.This issue affects FreshMail For WordPress: from n/a through 2.3.2. Published: 2024-01-31T12:15:37.483Z Updated: 2026-04-28T16:09:09.806Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/freshmail-integration/wordpress-freshmail-for-wordpress-plugin-2-3-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-46074`	vulnerable	2026-06-08 06:12:43.787249	WordPress FreshMail For WordPress Plugin <= 2.3.2 is vulnerable to Cross Site Scripting (XSS) MEDIUM (5.8) Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Borbis Media FreshMail For WordPress plugin <= 2.3.2 versions. Published: 2023-10-26T11:54:40.082Z Updated: 2026-04-28T16:08:44.879Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/freshmail-integration/wordpress-freshmail-for-wordpress-plugin-2-3-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.