Kibokolabs
Kibokolabs Arigato Autoresponder AND Newsletter: vulnerabilidades y CVE
Kibokolabs Arigato Autoresponder AND Newsletter tiene 18 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE18
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-39594 | Alta (7.1) | 0.23% | — | 17 abr 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Arigato Autoresponder and Newsletter bft-autoresponder allows Reflected XSS.This issue affects Arigato… |
| CVE-2024-34823 | Media (4.3) | 0.25% | — | 14 may 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter.This issue affects Arigato Autoresponder and Newsletter: from n/a through 2.7.2.3. |
| CVE-2023-47686 | Alta (8.8) | 0.26% | — | 16 nov 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.2.2 versions. |
| CVE-2023-25031 | Media (4.8) | 0.39% | — | 7 abr 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.1 versions. |
| CVE-2023-25020 | Media (6.1) | 0.41% | — | 7 abr 2023 | Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.1.1 versions. |
| CVE-2023-25061 | Media (5.4) | 0.38% | — | 7 abr 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.1.1 versions. |
| CVE-2023-0543 | Media (4.8) | 0.46% | — | 27 feb 2023 | The Arigato Autoresponder and Newsletter WordPress plugin before 2.1.7.2 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting… |
| CVE-2018-1002009 | Media (4.8) | 2.6% | — | 3 dic 2018 | There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit. There is an XSS vulnerability in… |
| CVE-2018-1002008 | Media (4.8) | 2.6% | — | 3 dic 2018 | There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit. There is an XSS vulnerability in list-user.html.php:4:… |
| CVE-2018-1002007 | Media (4.8) | 2.6% | — | 3 dic 2018 | There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit. There is an XSS vulnerability in… |
| CVE-2018-1002006 | Media (4.8) | 2.6% | — | 3 dic 2018 | These vulnerabilities require administrative privileges to exploit. There is an XSS vulnerability in integration-contact-form.html.php:14: via POST request variable classes |
| CVE-2018-1002005 | Media (4.8) | 3.1% | — | 3 dic 2018 | These vulnerabilities require administrative privileges to exploit. There is an XSS vulnerability in bft_list.html.php:43: via the filter_signup_date parameter. |
| CVE-2018-1002004 | Media (4.8) | 2.9% | — | 3 dic 2018 | There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit. |
| CVE-2018-1002003 | Media (4.8) | 2.9% | — | 3 dic 2018 | There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit. |
| CVE-2018-1002002 | Media (4.8) | 2.9% | — | 3 dic 2018 | There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit. |
| CVE-2018-1002001 | Media (4.8) | 2.9% | — | 3 dic 2018 | There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit. |
| CVE-2018-1002000 | Alta (7.2) | 4.4% | — | 3 dic 2018 | There is blind SQL injection in WordPress Arigato Autoresponder and Newsletter v2.5.1.8 These vulnerabilities require administrative privileges to exploit. There is an exploitable blind SQL injection vulnerability via… |
| CVE-2018-18461 | Crítica (9.8) | 4.2% | — | 18 oct 2018 | The Arigato Autoresponder and Newsletter (aka bft-autoresponder) v2.5.1.7 plugin for WordPress allows remote attackers to execute arbitrary code via PHP code in attachments[] data to models/attachment.php. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.