WordPress plugin
EnvíaloSimple: Email Marketing y Newsletters security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 6 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium5
- Low0
All EnvíaloSimple: Email Marketing y Newsletters vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.9 | Authenticated (Administrator+) SQL Injection via 'orderby' Parameter ≤2.4.5Update to 2.4.6 | CVE-2026-7618 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤2.2Update to 2.3 | CVE-2024-32587 | |
| High8.8 | Cross-Site Request Forgery to Arbitrary File Upload ≤2.3Update to 2.4 | CVE-2024-2125 | |
| Medium4.3 | Cross-Site Request Forgery ≤2.2Update to 2.3 | CVE-2023-51416 | |
| Medium6.5 | EnvíaloSimple <= 2.1 Unauthenticated PHP Object Injection ≤2.1Update to 2.2 | CVE-2023-51414 | |
| Medium6.1 | Cross-Site Scripting ≤1.97Update to 1.98 | CVE-2014-4527 |
- Medium4.9Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
≤2.4.5Update to 2.4.6
- Medium6.1Reflected Cross-Site Scripting
≤2.2Update to 2.3
- High8.8Cross-Site Request Forgery to Arbitrary File Upload
≤2.3Update to 2.4
- Medium4.3Cross-Site Request Forgery
≤2.2Update to 2.3
- Medium6.5EnvíaloSimple <= 2.1 Unauthenticated PHP Object Injection
≤2.1Update to 2.2
- Medium6.1Cross-Site Scripting
≤1.97Update to 1.98
EnvíaloSimple: Email Marketing y Newsletters: common questions
Does EnvíaloSimple: Email Marketing y Newsletters have known vulnerabilities?
Yes. VulnCrest Radar lists 6 known vulnerabilities in EnvíaloSimple: Email Marketing y Newsletters: 1 high, 5 medium. None are known to affect version null.
How do I check which version of EnvíaloSimple: Email Marketing y Newsletters I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent EnvíaloSimple: Email Marketing y Newsletters vulnerability?
CVE-2026-7618, published May 26, 2026: EnvíaloSimple: Email Marketing y Newsletters <= 2.4.5 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter. Severity: Medium (CVSS 4.9).
Is any EnvíaloSimple: Email Marketing y Newsletters vulnerability listed in CISA KEV?
No. None of the known EnvíaloSimple: Email Marketing y Newsletters vulnerabilities is currently listed in the CISA KEV catalog.