contrid newsletters vulnerabilities in 2024, newest first
Filter
By year: all 2026 2025 2024 2023 2022 2021
- 5.3CVE-2024-7411EPSS 0.4%
The Newsletters plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 4.9.9. This is due the plugin not preventing direct access to the /vendor/mobiledetect/mobiledetectlib/export/exportToJSON.php…