← Back

Madewithfuel

madewithfuel

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Customize Wordpress Emails And Alerts
customize_wordpress_emails_and_alerts
1 CVE
Better Notifications For Wp
better_notifications_for_wp
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-32964
1Madewithfuel
1Better Notifications For Wp
Jun 17, 2026
May 26, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Cross-Site Request Forgery (CSRF) vulnerability in Made with Fuel Better Notifications for WP plugin <= 1.9.2 versions.
CVE-2022-0345
1Madewithfuel
1Customize Wordpress Emails And Alerts
Jun 17, 2026
Feb 28, 2022
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
The Customize WordPress Emails and Alerts WordPress plugin before 1.8.7 does not have authorisation and CSRF check in its bnfw_search_users AJAX action, allowing any authenticated users to call it and query for user e-ma...Show more
The Customize WordPress Emails and Alerts WordPress plugin before 1.8.7 does not have authorisation and CSRF check in its bnfw_search_users AJAX action, allowing any authenticated users to call it and query for user e-mail prefixes (finding the first letter, then the second one, then the third one etc.).Show less