Skip to content
OpenAdvisories

Vendor

Winwar Media

6 known vulnerabilities.

Products

WP Email Capture 2 Inline Tweet Sharer – Twitter Sharing Plugin 1 WP Flipclock 1 WordPress Email Marketing Plugin – WP Email Capture 1 WP eBay Product Feeds 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.3
    CVE-2023-28421

    WordPress WordPress Email Marketing Plugin – WP Email Capture Plugin <= 3.10 is vulnerable to Sensitive Data Exposure

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Winwar Media WordPress Email Marketing Plugin – WP Email Capture.This issue affects WordPress Email Marketing Plugin – WP Email Capture: from n/a through 3.10.

    Winwar Media WordPress Email Marketing Plugin – WP Email Capture Web / CMS
  • Medium 4.3
    CVE-2023-23724

    WordPress WordPress Email Marketing Plugin – WP Email Capture Plugin <= 3.9.3 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Winwar Media WP Email Capture plugin <= 3.9.3 versions.

    Winwar Media WP Email Capture
  • Medium 5.9
    CVE-2023-23723

    WordPress WordPress Email Marketing Plugin – WP Email Capture Plugin <= 3.9.3 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Winwar Media WP Email Capture plugin <= 3.9.3 versions.

    Winwar Media WP Email Capture
  • Medium 5.9
    CVE-2023-24005

    WordPress Inline Tweet Sharer – Twitter Sharing Plugin Plugin <= 2.5.3 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Winwar Media Inline Tweet Sharer – Twitter Sharing Plugin plugin <= 2.5.3 versions.

    Winwar Media Inline Tweet Sharer – Twitter Sharing Plugin
  • Medium 5.9
    CVE-2023-23722

    WordPress WP eBay Product Feeds Plugin <= 3.3.1 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Winwar Media WP eBay Product Feeds plugin <= 3.3.1 versions.

    Winwar Media WP eBay Product Feeds
  • Medium 6.5
    CVE-2023-23728

    WordPress WP Flipclock Plugin <= 1.7.4 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Winwar Media WP Flipclock plugin <= 1.7.4 versions.

    Winwar Media WP Flipclock