Medium
CVE-2025-46463
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 45
Reset filters
Medium
CVE-2025-22595
Mailing Group Listserv <= 2.0.9 - Reflected Cross-Site Scripting
High
CVE-2025-22540
Emailing Subscription <= 1.4.1 - Unauthenticated SQL Injection
Medium
CVE-2025-22527
Mailing Group Listserv <= 2.0.9 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-12261
SmartEmailing.cz <= 2.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-24617
AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 9.11.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-8477
Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) <= 3.1.87 - Cross-Site Request Forgery
High
CVE-2024-7384
AcyMailing <= 9.7.2 - Authenticated (Subscriber+) Arbitrary File Upload via acym_extractArchive Function
Medium
CVE-2024-43287
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.82 - Cross-Site Request Forgery
Medium
CVE-2024-35668
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.77 - Reflected Cross-Site Scripting
Medium
CVE-2026-15297
Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) <= 3.1.77 - Reflected Cross-Site Scripting
Medium
CVE-2023-47849
BlossomThemes Email Newsletter <= 2.2.4 - Missing Authorization
Medium
CVE-2023-47828
wpMandrill <= 1.33 - Missing Authorization via getAjaxStats
Medium
CVE-2023-41867
AcyMailing SMTP Newsletter <= 8.6.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-2472
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.60 - Reflected Cross-Site Scripting via 'lang'
Medium
CVE-2023-1090
SMTP Mailing Queue <= 1.4.7 - Authenticated (Admin+) Stored Cross-Site Scripting
High
86f7eb83-8483-4c6b-993e-ce11084241e8
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.39 - Cross-Site Scripting
Medium
CVE-2021-24874
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.30 - Reflected Cross-Site Scripting via lang & pid Parameters
Medium
CVE-2021-24923
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.24 - Reflected Cross-Site Scripting
Medium
CVE-2021-38354
GNU-Mailman Integration <= 1.0.6 - Reflected Cross-Site Scripting
Medium
CVE-2021-24288
AcyMailing SMTP Newsletter < 7.5.0 - Open Redirect
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.