The MailerPress plugin for WordPress has a vulnerability allowing unauthorized access to update contact details due to a missing capability check on the `mailerpress/v1/contact` endpoint in all versions up to and including 1.5.0. This issue affects WordPress installations using the MailerPress plugin, potentially allowing attackers to manipulate contact information. The vulnerability has a CVSS score of 5 [truncated]
The MailerPress – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Campaign HTML Content Field in all versions up to, and including, 2.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts i [truncated]
