CVE-2018-1002009

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit. There is an XSS vulnerability in unsubscribe.html.php:3: via GET reuqest to the email variable.

• CWE-79

• http://www.vapidlabs.com/advisory.php?v=203Exploit, Third Party Advisory
• https://wordpress.org/plugins/bft-autoresponder/Third Party Advisory
• https://www.exploit-db.com/exploits/45434/Exploit, Third Party Advisory, VDB Entry
• http://www.vapidlabs.com/advisory.php?v=203Exploit, Third Party Advisory
• https://wordpress.org/plugins/bft-autoresponder/Third Party Advisory
• https://www.exploit-db.com/exploits/45434/Exploit, Third Party Advisory, VDB Entry

Published

Dec 3, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1002003There is a reflected XSS vulnerability in WordPress Arigato …
• CVE-2018-1002004There is a reflected XSS vulnerability in WordPress Arigato …
• CVE-2018-1002005These vulnerabilities require administrative privileges to e…
• CVE-2018-1002006These vulnerabilities require administrative privileges to e…
• CVE-2018-1002007There is a reflected XSS vulnerability in WordPress Arigato …
• CVE-2018-1002008There is a reflected XSS vulnerability in WordPress Arigato …
• CVE-2018-10021drivers/scsi/libsas/sas_scsi_host.c in the Linux kernel befo…
• CVE-2018-1002100In Kubernetes versions 1.5.x, 1.6.x, 1.7.x, 1.8.x, and prior…4.2
• CVE-2018-1002101In Kubernetes versions 1.9.0-1.9.9, 1.10.0-1.10.5, and 1.11.…5.9
• CVE-2018-1002102Improper validation of URL redirection in the Kubernetes API…2.6
• CVE-2018-1002103In Minikube versions 0.3.0-0.29.0, minikube exposes the Kube…8.1
• CVE-2018-1002104Versions < 1.5 of the Kubernetes ingress default backend, wh…5.3