PatchTheCVEenl newsletter plugin project vulnerabilities
Recent CVEs affecting enl newsletter plugin project products. 3 tracked.
enl newsletter plugin project has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2024-04-26. Highest priority: CVE-2024-3060 (score 32/100).
- CVE-2024-3060 MEDIUM 4.5 UPGRADE The ENL Newsletter WordPress plugin through 1.0.1 does not sanitize and escape a parameter before using it in
- CVE-2024-3059 MEDIUM 5.7 UPGRADE The ENL Newsletter WordPress plugin through 1.0.1 does not have CSRF checks in some places, which could allow
- CVE-2024-3058 MEDIUM 5.4 UPGRADE The ENL Newsletter WordPress plugin through 1.0.1 does not have CSRF check in some places, and is missing sani
FAQ
How do I fix enl newsletter plugin project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is enl newsletter plugin project being exploited right now?
None of the tracked enl newsletter plugin project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which enl newsletter plugin project CVE should I patch first?
CVE-2024-3060 currently ranks highest (32/100): The ENL Newsletter WordPress plugin through 1.0.1 does not sanitize and escape a parameter before using it in .
Products
RSS feed for enl newsletter plugin project · ← Back to latest CVEs