Donweb vulnerabilities
We track 2 vulnerabilities in Donweb products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 9, 2024.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Donweb vulnerabilities
- 8.8 High severity
EnvíaloSimple: Email Marketing y Newsletters: Cross-Site Request Forgery
The EnvíaloSimple: Email Marketing y Newsletters plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3. This is due to missing or incorrect nonce validation on the gallery_add function. This makes it possibl
- 9.8 Critical severity
EnvíaloSimple: Email Marketing y Newsletters: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in EnvialoSimple EnvíaloSimple: Email Marketing y Newsletters.This issue affects EnvíaloSimple: Email Marketing y Newsletters: from n/a through 2.1.