Medium severity6.1NVD Advisory· Published Jul 28, 2019· Updated Jun 17, 2026

CVE-2019-14364

Description

An XSS vulnerability in the "Email Subscribers & Newsletters" plugin 4.1.6 for WordPress allows an attacker to inject malicious JavaScript code through a publicly available subscription form using the esfpx_name wp-admin/admin-ajax.php POST parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Email Subscribers & Newslettersdescription
WordPress/Email Subscribers \& Newslettersllm-fuzzy
Range: <=4.1.6

Patches

Vulnerability mechanics

References

wpvulndb.com/vulnerabilities/9508nvdThird Party Advisory
wordpress.org/plugins/email-subscribers/nvdRelease Notes
github.com/ivoschyk-cs/CVE-s/blob/master/Email%20Subscribers%20%26%20Newsletters%20Wordpress%20Plugin%20%28XSS%29nvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000