What’s Vulnerable › Products

AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth version is affected

Latest AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth vulnerabilities

• CVE-2024-13313 — AWeber <= 7.3.20 - Admin+ Stored XSS (CVSS 4.8)
• CVE-2024-1793 — AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth By AWeber <= 7.3.14 - Authenticated (Admin+) SQL Injection (CVSS 7.2)
• CVE-2023-47757 — WordPress AWeber Plugin <= 7.3.9 is vulnerable to Broken Access Control (CVSS 8.8)