PT-2014-6078 · WordPress · Mailpoet Newsletters

Published 2014-07-27 · Updated 2014-07-28 · CVE-2014-4726

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MailPoet Newsletters (wysija-newsletters) plugin versions prior to 2.6.8

Description The issue concerns an unspecified vulnerability in the MailPoet Newsletters plugin for WordPress. The impact and attack vectors of this vulnerability are not specified.

Recommendations For versions prior to 2.6.8, update to version 2.6.8 or later to resolve the issue.

Fix

Related Identifiers

CVE-2014-4726

Affected Products

Mailpoet Newsletters

References · 4

• https://wordpress.org/plugins/wysija-newsletters/changelog · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2014-4726 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4726 · Note
• http://openwall.com/lists/oss-security/2014/07/08/7 · Note