Search vulnerabilities

Results 2

Export CSV
CVE-2026-105983

Email Marketing 4Dem <= 2.0.5 - Unauthenticated Settings Modification and Configuration Disclosure

The Email Marketing 4Dem WordPress plugin through 2.0.5 does not perform authorization or capability checks on several of its AJAX actions and REST routes, allowing unauthenticated users to disclose the Email Marketing 4Dem WordPress plugin through 2.0.5's stored configuration and data and to modify its stored settings.

CVSS n/a EPSS < 1% KEV · Not listed
CVE-2026-105984

Email Marketing 4Dem <= 2.0.5 - Unauthenticated Configuration Destruction and Arbitrary Plugin Record Deletion

The Email Marketing 4Dem WordPress plugin through 2.0.5 does not perform authorization or capability checks on several of its AJAX actions, allowing unauthenticated users to destroy its stored configuration and delete its records.

CVSS n/a EPSS < 1% KEV · Not listed