Tribulant vulnerabilities, page 2
26 vulnerabilities
Known vulnerabilities in Tribulant products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 6 products.
MediumCVE-2019-14787tribulant · newsletters +1 moretribulant newslettersThe Tribulant Newsletters plugin before 4.6.19 for WordPress allows XSS via the wp-admin/admin-ajax.php?action=newsletters_load_new_editor contentarea parameter.EPSS1.03%HighCVE-2019-15828tribulant · one_click_ssl +1 moretribulant one_click_sslThe one-click-ssl plugin before 1.4.7 for WordPress has CSRF.EPSS0.80%HighCVE-2023-4797tribulant · newsletters +2 moreNewsletter Lite < 4.9.3 - Admin+ Command InjectionThe Newsletters WordPress plugin before 4.9.3 does not properly escape user-controlled parameters when they are appended to SQL queries and shell commands, which could enable an administrator to run arbitrary commands on the server.EPSS0.96%HighCVE-2023-28497tribulant · slideshow_gallery +2 moreWordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to Cross Site Request Forgery (CSRF)Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Slideshow Gallery LITE plugin <= 1.7.6 versions.EPSS0.28%HighCVE-2023-28491tribulant · slideshow_gallery +2 moreWordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to SQL InjectionImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Slideshow Gallery LITE.This issue affects Slideshow Gallery LITE: from n/a through 1.7.6.EPSS0.76%HighCVE-2023-30478tribulant · newsletters +1 moreWordPress Newsletters Plugin <= 4.8.8 is vulnerable to Cross Site Request Forgery (CSRF)Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Newsletters plugin <= 4.8.8 versions.EPSS0.30%