← Back

Sola Newsletters Project

sola-newsletters_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Sola Newsletters Project
1Sola Newsletters
Jun 17, 2026
Aug 5, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
The Nifty Newsletters WordPress plugin is vulnerable to Cross-Site Request Forgery via the sola_nl_wp_head function found in the ~/sola-newsletters.php file which allows attackers to inject arbitrary web scripts, in vers...Show more
The Nifty Newsletters WordPress plugin is vulnerable to Cross-Site Request Forgery via the sola_nl_wp_head function found in the ~/sola-newsletters.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 4.0.23.Show less