CVE-2018-6015

An issue was discovered in the "Email Subscribers & Newsletters" plugin before 3.4.8 for WordPress

published January 26, 2018

CVSS
—
EPSS
3%
Percentile
88.1
In the wild
Unconfirmed
What it is

An issue was discovered in the "Email Subscribers & Newsletters" plugin before 3.4.8 for WordPress. Sending an HTTP POST request to a URI with /?es=export at the end, and adding option=view_all_subscribers in the body, allows downloading of a CSV data file with all subscriber data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03216 · 88.1th percentile
Published
2018-01-26T20:00Z
EPSS history
Timeline
  • 26 JAN 20:00Z
    An issue was discovered in the "Email Subscribers & Newsletters" plugin before 3.4.8 for WordPress
    cvelistv5