Envialosimple vulnerabilities

2 known vulnerabilities in Envialosimple from Donweb. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  EnvíaloSimple: Email Marketing y Newsletters: Cross-Site Request Forgery

  CVE-2024-2125Apr 9, 2024Dattateccom

  The EnvíaloSimple: Email Marketing y Newsletters plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3. This is due to missing or incorrect nonce validation on the gallery_add function. This makes it possibl

• 9.8 Critical severity

  EnvíaloSimple: Email Marketing y Newsletters: Deserialization of Untrusted Data

  CVE-2023-51414Dec 29, 2023EnvialoSimple

  Deserialization of Untrusted Data vulnerability in EnvialoSimple EnvíaloSimple: Email Marketing y Newsletters.This issue affects EnvíaloSimple: Email Marketing y Newsletters: from n/a through 2.1.