Skip to content
OpenAdvisories

Vendor

SolaPlugins

3 known vulnerabilities.

Products

Sola Support Ticket 1 Nifty Newsletters 1 Super Testimonials 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2021-34634

    Nifty Newsletters <= 4.0.23 - Cross-Site Request Forgery to Stored Cross-Site Scripting

    The Nifty Newsletters WordPress plugin is vulnerable to Cross-Site Request Forgery via the sola_nl_wp_head function found in the ~/sola-newsletters.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 4.0.23.

    SolaPlugins Nifty Newsletters Web / CMS