CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-4772

The Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'newsletter_form' shortcode in versions up to, and including, 7.8.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 26.6%

CVSS Severity

CVSS v3 Score 6.4

References

Products affected by CVE-2023-4772

Thenewsletterplugin » Newsletter » Version: N/A

cpe:2.3:a:thenewsletterplugin:newsletter:-
Thenewsletterplugin » Newsletter » Version: 2.4.6

cpe:2.3:a:thenewsletterplugin:newsletter:2.4.6
Thenewsletterplugin » Newsletter » Version: 6.8.2

cpe:2.3:a:thenewsletterplugin:newsletter:6.8.2
Thenewsletterplugin » Newsletter » Version: 7.0.0

cpe:2.3:a:thenewsletterplugin:newsletter:7.0.0
Thenewsletterplugin » Newsletter » Version: 7.0.1

cpe:2.3:a:thenewsletterplugin:newsletter:7.0.1
Thenewsletterplugin » Newsletter » Version: 7.0.2

cpe:2.3:a:thenewsletterplugin:newsletter:7.0.2
Thenewsletterplugin » Newsletter » Version: 7.0.3

cpe:2.3:a:thenewsletterplugin:newsletter:7.0.3
Thenewsletterplugin » Newsletter » Version: 7.0.4

cpe:2.3:a:thenewsletterplugin:newsletter:7.0.4
Thenewsletterplugin » Newsletter » Version: 7.0.5

cpe:2.3:a:thenewsletterplugin:newsletter:7.0.5
Thenewsletterplugin » Newsletter » Version: 7.0.6

cpe:2.3:a:thenewsletterplugin:newsletter:7.0.6
Thenewsletterplugin » Newsletter » Version: 7.0.7

cpe:2.3:a:thenewsletterplugin:newsletter:7.0.7
Thenewsletterplugin » Newsletter » Version: 7.0.8

cpe:2.3:a:thenewsletterplugin:newsletter:7.0.8
Thenewsletterplugin » Newsletter » Version: 7.0.9

cpe:2.3:a:thenewsletterplugin:newsletter:7.0.9
Thenewsletterplugin » Newsletter » Version: 7.1.0

cpe:2.3:a:thenewsletterplugin:newsletter:7.1.0
Thenewsletterplugin » Newsletter » Version: 7.1.1

cpe:2.3:a:thenewsletterplugin:newsletter:7.1.1
Thenewsletterplugin » Newsletter » Version: 7.1.2

cpe:2.3:a:thenewsletterplugin:newsletter:7.1.2
Thenewsletterplugin » Newsletter » Version: 7.1.3

cpe:2.3:a:thenewsletterplugin:newsletter:7.1.3
Thenewsletterplugin » Newsletter » Version: 7.1.4

cpe:2.3:a:thenewsletterplugin:newsletter:7.1.4
Thenewsletterplugin » Newsletter » Version: 7.1.5

cpe:2.3:a:thenewsletterplugin:newsletter:7.1.5
Thenewsletterplugin » Newsletter » Version: 7.1.6

cpe:2.3:a:thenewsletterplugin:newsletter:7.1.6
Thenewsletterplugin » Newsletter » Version: 7.1.7

cpe:2.3:a:thenewsletterplugin:newsletter:7.1.7
Thenewsletterplugin » Newsletter » Version: 7.1.8

cpe:2.3:a:thenewsletterplugin:newsletter:7.1.8
Thenewsletterplugin » Newsletter » Version: 7.1.9

cpe:2.3:a:thenewsletterplugin:newsletter:7.1.9
Thenewsletterplugin » Newsletter » Version: 7.2.0

cpe:2.3:a:thenewsletterplugin:newsletter:7.2.0
Thenewsletterplugin » Newsletter » Version: 7.2.1

cpe:2.3:a:thenewsletterplugin:newsletter:7.2.1
Thenewsletterplugin » Newsletter » Version: 7.2.2

cpe:2.3:a:thenewsletterplugin:newsletter:7.2.2
Thenewsletterplugin » Newsletter » Version: 7.2.3

cpe:2.3:a:thenewsletterplugin:newsletter:7.2.3
Thenewsletterplugin » Newsletter » Version: 7.2.4

cpe:2.3:a:thenewsletterplugin:newsletter:7.2.4
Thenewsletterplugin » Newsletter » Version: 7.2.5

cpe:2.3:a:thenewsletterplugin:newsletter:7.2.5
Thenewsletterplugin » Newsletter » Version: 7.2.6

cpe:2.3:a:thenewsletterplugin:newsletter:7.2.6
Thenewsletterplugin » Newsletter » Version: 7.2.7

cpe:2.3:a:thenewsletterplugin:newsletter:7.2.7
Thenewsletterplugin » Newsletter » Version: 7.2.8

cpe:2.3:a:thenewsletterplugin:newsletter:7.2.8
Thenewsletterplugin » Newsletter » Version: 7.2.9

cpe:2.3:a:thenewsletterplugin:newsletter:7.2.9
Thenewsletterplugin » Newsletter » Version: 7.3.0

cpe:2.3:a:thenewsletterplugin:newsletter:7.3.0
Thenewsletterplugin » Newsletter » Version: 7.3.1

cpe:2.3:a:thenewsletterplugin:newsletter:7.3.1
Thenewsletterplugin » Newsletter » Version: 7.3.2

cpe:2.3:a:thenewsletterplugin:newsletter:7.3.2
Thenewsletterplugin » Newsletter » Version: 7.3.3

cpe:2.3:a:thenewsletterplugin:newsletter:7.3.3
Thenewsletterplugin » Newsletter » Version: 7.3.4

cpe:2.3:a:thenewsletterplugin:newsletter:7.3.4
Thenewsletterplugin » Newsletter » Version: 7.3.5

cpe:2.3:a:thenewsletterplugin:newsletter:7.3.5
Thenewsletterplugin » Newsletter » Version: 7.3.6

cpe:2.3:a:thenewsletterplugin:newsletter:7.3.6
Thenewsletterplugin » Newsletter » Version: 7.3.7

cpe:2.3:a:thenewsletterplugin:newsletter:7.3.7
Thenewsletterplugin » Newsletter » Version: 7.3.8

cpe:2.3:a:thenewsletterplugin:newsletter:7.3.8
Thenewsletterplugin » Newsletter » Version: 7.3.9

cpe:2.3:a:thenewsletterplugin:newsletter:7.3.9
Thenewsletterplugin » Newsletter » Version: 7.4.0

cpe:2.3:a:thenewsletterplugin:newsletter:7.4.0
Thenewsletterplugin » Newsletter » Version: 7.4.1

cpe:2.3:a:thenewsletterplugin:newsletter:7.4.1
Thenewsletterplugin » Newsletter » Version: 7.4.2

cpe:2.3:a:thenewsletterplugin:newsletter:7.4.2
Thenewsletterplugin » Newsletter » Version: 7.4.3

cpe:2.3:a:thenewsletterplugin:newsletter:7.4.3
Thenewsletterplugin » Newsletter » Version: 7.4.4

cpe:2.3:a:thenewsletterplugin:newsletter:7.4.4
Thenewsletterplugin » Newsletter » Version: 7.4.5

cpe:2.3:a:thenewsletterplugin:newsletter:7.4.5
Thenewsletterplugin » Newsletter » Version: 7.4.6

cpe:2.3:a:thenewsletterplugin:newsletter:7.4.6
Thenewsletterplugin » Newsletter » Version: 7.4.7

cpe:2.3:a:thenewsletterplugin:newsletter:7.4.7
Thenewsletterplugin » Newsletter » Version: 7.4.8

cpe:2.3:a:thenewsletterplugin:newsletter:7.4.8
Thenewsletterplugin » Newsletter » Version: 7.4.9

cpe:2.3:a:thenewsletterplugin:newsletter:7.4.9
Thenewsletterplugin » Newsletter » Version: 7.5.0

cpe:2.3:a:thenewsletterplugin:newsletter:7.5.0
Thenewsletterplugin » Newsletter » Version: 7.5.1

cpe:2.3:a:thenewsletterplugin:newsletter:7.5.1
Thenewsletterplugin » Newsletter » Version: 7.5.2

cpe:2.3:a:thenewsletterplugin:newsletter:7.5.2
Thenewsletterplugin » Newsletter » Version: 7.5.3

cpe:2.3:a:thenewsletterplugin:newsletter:7.5.3
Thenewsletterplugin » Newsletter » Version: 7.5.4

cpe:2.3:a:thenewsletterplugin:newsletter:7.5.4
Thenewsletterplugin » Newsletter » Version: 7.5.5

cpe:2.3:a:thenewsletterplugin:newsletter:7.5.5
Thenewsletterplugin » Newsletter » Version: 7.5.6

cpe:2.3:a:thenewsletterplugin:newsletter:7.5.6
Thenewsletterplugin » Newsletter » Version: 7.5.7

cpe:2.3:a:thenewsletterplugin:newsletter:7.5.7
Thenewsletterplugin » Newsletter » Version: 7.5.8

cpe:2.3:a:thenewsletterplugin:newsletter:7.5.8
Thenewsletterplugin » Newsletter » Version: 7.5.9

cpe:2.3:a:thenewsletterplugin:newsletter:7.5.9
Thenewsletterplugin » Newsletter » Version: 7.6.0

cpe:2.3:a:thenewsletterplugin:newsletter:7.6.0
Thenewsletterplugin » Newsletter » Version: 7.6.1

cpe:2.3:a:thenewsletterplugin:newsletter:7.6.1
Thenewsletterplugin » Newsletter » Version: 7.6.2

cpe:2.3:a:thenewsletterplugin:newsletter:7.6.2
Thenewsletterplugin » Newsletter » Version: 7.6.3

cpe:2.3:a:thenewsletterplugin:newsletter:7.6.3
Thenewsletterplugin » Newsletter » Version: 7.6.4

cpe:2.3:a:thenewsletterplugin:newsletter:7.6.4
Thenewsletterplugin » Newsletter » Version: 7.6.5

cpe:2.3:a:thenewsletterplugin:newsletter:7.6.5
Thenewsletterplugin » Newsletter » Version: 7.6.6

cpe:2.3:a:thenewsletterplugin:newsletter:7.6.6
Thenewsletterplugin » Newsletter » Version: 7.6.7

cpe:2.3:a:thenewsletterplugin:newsletter:7.6.7
Thenewsletterplugin » Newsletter » Version: 7.6.8

cpe:2.3:a:thenewsletterplugin:newsletter:7.6.8
Thenewsletterplugin » Newsletter » Version: 7.6.9

cpe:2.3:a:thenewsletterplugin:newsletter:7.6.9
Thenewsletterplugin » Newsletter » Version: 7.8.0

cpe:2.3:a:thenewsletterplugin:newsletter:7.8.0
Thenewsletterplugin » Newsletter » Version: 7.8.1

cpe:2.3:a:thenewsletterplugin:newsletter:7.8.1
Thenewsletterplugin » Newsletter » Version: 7.8.2

cpe:2.3:a:thenewsletterplugin:newsletter:7.8.2
Thenewsletterplugin » Newsletter » Version: 7.8.3

cpe:2.3:a:thenewsletterplugin:newsletter:7.8.3
Thenewsletterplugin » Newsletter » Version: 7.8.4

cpe:2.3:a:thenewsletterplugin:newsletter:7.8.4
Thenewsletterplugin » Newsletter » Version: 7.8.5

cpe:2.3:a:thenewsletterplugin:newsletter:7.8.5
Thenewsletterplugin » Newsletter » Version: 7.8.6

cpe:2.3:a:thenewsletterplugin:newsletter:7.8.6
Thenewsletterplugin » Newsletter » Version: 7.8.7

cpe:2.3:a:thenewsletterplugin:newsletter:7.8.7
Thenewsletterplugin » Newsletter » Version: 7.8.8

cpe:2.3:a:thenewsletterplugin:newsletter:7.8.8
Thenewsletterplugin » Newsletter » Version: 7.8.9

cpe:2.3:a:thenewsletterplugin:newsletter:7.8.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-4772

Products

Pricing

Contact Us