Aweber vulnerabilities
We track 2 vulnerabilities in Aweber products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 13, 2024.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest Aweber vulnerabilities
- 7.2 High severity
AWeber – Free Sign Up Form and Landing Page…: Improper Neutralization of Special Elements used in an SQL Command
The AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth plugin for WordPress is vulnerable to SQL Injection via the 'post_id' parameter in all versions up to, and including, 7.3.14 due to insufficient esca
- 8.8 High severity
AWeber – Free Sign Up Form and Landing Page…: Cross-Site Request Forgery
Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in AWeber AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth allows Accessing Functionality Not Properly Constrained by ACLs, Cross-S