Email Subscribers & Newsletters

Unauthenticated SQL Injection vulnerability <= 5.7.14

Authenticated (Administrator+) CrossSite Scripting via CSV import vulnerability <= 5.7.15

Broken Access Control vulnerability <= 5.7.13

Reflected Cross Site Scripting (XSS) vulnerability <= 5.7.11

Authenticated (Administrator+) Directory Traversal to Arbitrary File Read vulnerability <= 5.6.23