plugin
11 known security issues reported for the Email Artillery WordPress plugin. Most recent disclosed Sep 13, 2021.
Running Email Artillery on your site? Check whether your installed version is affected.
Scan your site free[en] The Email Artillery (MASS EMAIL) WordPress plugin through 4.1 does not properly check the uploaded files from the Import Emails feature, allowing arbitrary files to be uploaded. Furthermore, the plugin is also lacking any CSRF check, allowing such issue to be exploited via a CSRF attack as well. However, due to th...
The Email Artillery (MASS EMAIL) WordPress plugin through 4.1 does not properly check the uploaded files from the Import Emails feature, allowing arbitrary files to be uploaded. Furthermore, the plugin is also lacking any CSRF check, allowing such issue to be exploited via a CSRF attack as well. However, due to the pre...
The Email Artillery (MASS EMAIL) plugin for WordPress is vulnerable to various SQL Injection via the 'post_id' and 'email_id' parameters in versions up to, and including, 4.1 due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...
The Email Artillery (MASS EMAIL) plugin for WordPress is vulnerable to various Reflected Cross-Site Scripting via the 'cpage' and 'site_id' parameters in versions up to, and including, 4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...
The Email Artillery (MASS EMAIL) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Cross-Site Request Forgery in versions up to, and including, 4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in page...
The Email Artillery (MASS EMAIL) plugin for WordPress is vulnerable to various Reflected Cross-Site Scripting via the 'cpage' and 'site_id' parameters in versions up to, and including, 4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...
The Email Artillery (MASS EMAIL) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Cross-Site Request Forgery in versions up to, and including, 4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in page...
The Email Artillery (MASS EMAIL) plugin for WordPress is vulnerable to various SQL Injection via the 'post_id' and 'email_id' parameters in versions up to, and including, 4.1 due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...
The plugin does not sanitise, validate or escape its settings, and is lacking any CSRF check before saving them. As a result, an attacker could make a logged in admin change them and put malicious JavaScript code as well, leading to Stored Cross-Site Scripting issues.
The plugin does not sanitise, validate or escape some user input before using it in SQL statements in the admin dashboard, leading to SQL Injections
The plugin does not sanitise, validate or escape some user input before outputting back in pages leading to Reflected Cross-Site Scripting issues which will be executed in the context of a logged in admin
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free