xyzscripts Newsletter Manager plugin for WordPress 1.0.1
Approved changes feed: RSS · Atom
cpe:2.3:a:xyzscripts:newsletter_manager:1.0.1:-:-:*:-:wordpress:*:*
part: a version: 1.0.1 update: -
| Vendor | Xyzscripts (1b1f056b-c738-50b3-808b-97c03ef4e8a9) |
|---|---|
| Product | Newsletter Manager (9b6a3892-baa2-5531-b631-fe700b59d8e2) |
| Edition | - |
| Language | * |
| Software edition | - |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-6629 |
vulnerable | 2026-06-08 05:03:01.308750 |
Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in the Newsletter Manager plugin 1.0.2 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change an email address or (2) conduct script insertion attacks. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Published: 2014-01-16T21:00:00.000Z
Updated: 2024-09-17T00:21:06.820Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-6628 |
vulnerable | 2026-06-08 05:03:01.308400 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in the Newsletter Manager plugin before 1.0.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) xyz_em_campName to admin/create_campaign.php or (2) admin/edit_campaign.php, (3) xyz_em_email parameter to admin/edit_email.php, (4) xyz_em_exportbatchSize parameter to import_export.php, or (5) pagination limit in the Newsletter Manager options.
Published: 2014-01-16T21:00:00.000Z
Updated: 2024-09-16T20:22:57.378Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-6627 |
vulnerable | 2026-06-08 05:03:01.307948 |
Details available
Cross-site scripting (XSS) vulnerability in admin/test_mail.php in the Newsletter Manager plugin 1.0.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter.
Published: 2014-01-16T21:00:00.000Z
Updated: 2024-09-17T03:53:48.446Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.