Skip to content
OpenAdvisories

Vendor

dattateccom

2 known vulnerabilities.

Products

EnvíaloSimple: Email Marketing y Newsletters 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-2125

    EnvíaloSimple: Email Marketing y Newsletters <= 2.3 - Cross-Site Request Forgery to Arbitrary File Upload

    The EnvíaloSimple: Email Marketing y Newsletters plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3. This is due to missing or incorrect nonce validation on the gallery_add function. This makes it possib…

    dattateccom EnvíaloSimple: Email Marketing y Newsletters Web / CMS