AlphaBPO vulnerabilities

Products

• Easy Newsletter Signups 2

Latest AlphaBPO CVEs

Newest publication first

1. CVE-2023-41664 WordPress Easy Newsletter Signups plugin <= 1.0.4 - Broken Access Control vulnerability

   Published 2024-12-13

   Medium·CVSS 6.5 EPSS 0.54%

   Missing Authorization vulnerability in AlphaBPO Easy Newsletter Signups allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Newsletter Signups: from n/a through 1.0.4.

2. CVE-2023-5108 Easy Newsletter Signups <= 1.0.4 - Admin+ SQLi

   Published 2023-12-04

   High·CVSS 7.2 EPSS 0.96%

   The Easy Newsletter Signups WordPress plugin through 1.0.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.