Pickplugins Mail Picker vulnerabilities

2 vulnerabilities

Known vulnerabilities in Pickplugins Mail Picker, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CriticalCVE-2024-54273pickplugins · mail picker +1 moreWordPress Mail Picker plugin <= 1.0.14 - PHP Object Injection vulnerabilityDeserialization of Untrusted Data vulnerability in PickPlugins Mail Picker mail-picker allows Object Injection.This issue affects Mail Picker: from n/a through <= 1.0.14.EPSS0.71%6.5MediumCVE-2024-53772pickplugins · mail picker +1 moreWordPress Mail Picker plugin <= 1.0.15 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Mail Picker mail-picker allows DOM-Based XSS.This issue affects Mail Picker: from n/a through <= 1.0.15.EPSS0.29%