WordPress plugin
EnvíaloSimple: Email Marketing y Newsletters security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 6 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium5
- Low0
All EnvíaloSimple: Email Marketing y Newsletters vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Cross-Site Request Forgery to Arbitrary File Upload ≤2.3Update to 2.4 | CVE-2024-2125 |
- High8.8Cross-Site Request Forgery to Arbitrary File Upload
≤2.3Update to 2.4
EnvíaloSimple: Email Marketing y Newsletters: common questions
Does EnvíaloSimple: Email Marketing y Newsletters have known vulnerabilities?
Yes. VulnCrest Radar lists 6 known vulnerabilities in EnvíaloSimple: Email Marketing y Newsletters: 1 high, 5 medium. None are known to affect version null.
How do I check which version of EnvíaloSimple: Email Marketing y Newsletters I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent EnvíaloSimple: Email Marketing y Newsletters vulnerability?
CVE-2026-7618, published May 26, 2026: EnvíaloSimple: Email Marketing y Newsletters <= 2.4.5 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter. Severity: Medium (CVSS 4.9).
Is any EnvíaloSimple: Email Marketing y Newsletters vulnerability listed in CISA KEV?
No. None of the known EnvíaloSimple: Email Marketing y Newsletters vulnerabilities is currently listed in the CISA KEV catalog.