Arigato Autoresponder and Newsletter

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Arigato Autoresponder and Newsletter

Information

Software Type Plugin
Software Slug bft-autoresponder (view on wordpress.org)
Software Status Active
Software Author prasunsen
Software Website calendarscripts.info
Software Downloads 114,059
Software Active Installs 1,000
Software Record Last Updated May 2, 2024

16 Vulnerabilities

Arigato Autoresponder and Newsletter <= 2.7.2.2 - Cross-Site Request Forgery
4.3
CVE-2023-47686
Nov 9, 2023
Researcher: Nguyen Xuan Chien
Arigato Autoresponder and Newsletter <= 2.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting
5.5
CVE-2023-25031
Feb 6, 2023
Researcher: Rafshanzani Suhada
Arigato Autoresponder and Newsletter <= 2.7.1 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2023-25020
Feb 6, 2023
Researcher: Rafshanzani Suhada
Arigato Autoresponder and Newsletter <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2023-25061
Feb 2, 2023
Researcher: Rafshanzani Suhada
Arigato Autoresponder and Newsletter <= 2.1.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2023-0543
Jan 31, 2023
Researchers: Felipe Restrepo Rodriguez (pfelilpe), Joaquin Pochat y Gabriel Calle
Arigato Autoresponder and Newsletter <= 2.7 - Arbitrary File Upload
9.8
CVE-2018-18461
Oct 17, 2018
Researcher: rakjong
Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting
6.1
CVE-2018-1002007
Sep 18, 2018
Researcher: Larry W. Cashdollar
Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting
6.1
CVE-2018-1002009
Sep 18, 2018
Researcher: Larry W. Cashdollar
Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting
6.1
CVE-2018-1002002
Sep 18, 2018
Researcher: Larry W. Cashdollar
Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting
6.1
CVE-2018-1002004
Sep 18, 2018
Researcher: Larry W. Cashdollar
Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting
6.1
CVE-2018-1002003
Sep 18, 2018
Researcher: Larry W. Cashdollar
Arigato Autoresponder and Newsletter <= 2.5.1.8 - SQL Injection
7.2
CVE-2018-1002000
Sep 18, 2018
Researcher: Larry W. Cashdollar
Arigato Autoresponder and Newsletter <= 2.5.1.8 - Cross-Site Scripting
4.8
CVE-2018-1002006
Sep 18, 2018
Researcher: Larry W. Cashdollar
Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting
6.1
CVE-2018-1002008
Sep 18, 2018
Researcher: Larry W. Cashdollar
Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting
6.1
CVE-2018-1002001
Sep 18, 2018
Researcher: Larry W. Cashdollar
Arigato Autoresponder and Newsletter <= 2.5.1.8 - Cross-Site Scripting
4.8
CVE-2018-1002005
Sep 18, 2018
Researcher: Larry W. Cashdollar
Title CVE ID CVSS Researchers Date
Arigato Autoresponder and Newsletter <= 2.7.2.2 - Cross-Site Request Forgery CVE-2023-47686 4.3 Nguyen Xuan Chien November 9, 2023
Arigato Autoresponder and Newsletter <= 2.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2023-25031 5.5 Rafshanzani Suhada February 6, 2023
Arigato Autoresponder and Newsletter <= 2.7.1 - Unauthenticated Stored Cross-Site Scripting CVE-2023-25020 7.2 Rafshanzani Suhada February 6, 2023
Arigato Autoresponder and Newsletter <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2023-25061 6.4 Rafshanzani Suhada February 2, 2023
Arigato Autoresponder and Newsletter <= 2.1.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2023-0543 4.4 Felipe Restrepo Rodriguez (pfelilpe), Joaquin Pochat y Gabriel Calle January 31, 2023
Arigato Autoresponder and Newsletter <= 2.7 - Arbitrary File Upload CVE-2018-18461 9.8 rakjong October 17, 2018
Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting CVE-2018-1002007 6.1 Larry W. Cashdollar September 18, 2018
Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting CVE-2018-1002009 6.1 Larry W. Cashdollar September 18, 2018
Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting CVE-2018-1002002 6.1 Larry W. Cashdollar September 18, 2018
Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting CVE-2018-1002004 6.1 Larry W. Cashdollar September 18, 2018
Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting CVE-2018-1002003 6.1 Larry W. Cashdollar September 18, 2018
Arigato Autoresponder and Newsletter <= 2.5.1.8 - SQL Injection CVE-2018-1002000 7.2 Larry W. Cashdollar September 18, 2018
Arigato Autoresponder and Newsletter <= 2.5.1.8 - Cross-Site Scripting CVE-2018-1002006 4.8 Larry W. Cashdollar September 18, 2018
Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting CVE-2018-1002008 6.1 Larry W. Cashdollar September 18, 2018
Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting CVE-2018-1002001 6.1 Larry W. Cashdollar September 18, 2018
Arigato Autoresponder and Newsletter <= 2.5.1.8 - Cross-Site Scripting CVE-2018-1002005 4.8 Larry W. Cashdollar September 18, 2018

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation