Skip to content
OpenAdvisories

Vendor

anilankola

2 known vulnerabilities.

Products

Newsletter Email Subscribe 1 Add Custom Body Class 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-14904

    Newsletter Email Subscribe <= 2.4 - Cross-Site Request Forgery to Plugin Settings Update

    The Newsletter Email Subscribe plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4. This is due to incorrect nonce validation on the nels_settings_page function. This makes it possible for unauthenticated att…

    anilankola Newsletter Email Subscribe Web / CMS
  • Medium 6.4
    CVE-2023-5205

    Add Custom Body Class <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Add Custom Body Class plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'add_custom_body_class' value in versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping. This makes it possible for au…

    anilankola Add Custom Body Class Web / CMS