Login Request a demo
MA
Product
Mailpoet
by Automattic · last CVE May 15, 2025
3
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 0Medium 3Low 0
Severity
All severities3Critical0High0Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Mailpoet to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-10103
6.1
0%
Nov 19
MailPoet < 5.3.2 - Admin+ Stored XSS
Affected: before 5.3.2
CVE-2019-11843
6.1
2%
Jun 2
The MailPoet plugin before 3.23.2 for WordPress allows remote attackers to inject arbitrary web script or HTML using extra parameters in the URL (Reflective Server-Side XSS)
Affected: before 3.23.2
CVE-2024-12743
4.8
0%
May 15
MailPoet < 5.5.2 - Admin+ Stored XSS
Affected: before 5.5.2
Showing 3