Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

Tribulant Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2025-4857`Newsletters <= 4.9.9.9 - Authenticated (Administrator+) Local File Inclusion	Exploitation statusNot known exploited	FixYes	Affected productNewsletters	Published05/31/2025	SeverityHigh
`CVE-2024-13739`Newsletters <= 4.9.9.7 - Reflected Cross-Site Scripting via To Parameter	Exploitation statusNot known exploited	FixYes	Affected productNewsletters	Published03/22/2025	SeverityMedium
`CVE-2025-24599`WordPress Newsletters plugin <= 4.9.9.6 - Reflected Cross Site Scripting (XSS) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productNewsletters	Published02/04/2025	SeverityHigh
`CVE-2024-10181`Newsletters <= 4.9.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via newsletters_video Shortcode	Exploitation statusNot known exploited	FixYes	Affected productNewsletters	Published10/29/2024	SeverityMedium
`CVE-2024-47346`WordPress Newsletters plugin <= 4.9.9.1 - Reflected Cross Site Scripting (XSS) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productNewsletters	Published10/06/2024	SeverityHigh
`CVE-2024-47376`WordPress Slideshow Gallery LITE plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productSlideshow Gallery	Published10/05/2024	SeverityMedium
`CVE-2024-8247`Newsletters <= 4.9.9.2 - Authenticated Privilege Escalation	Exploitation statusNot known exploited	FixYes	Affected productNewsletters	Published09/06/2024	SeverityHigh
`CVE-2024-43279`WordPress Newsletters plugin <= 4.9.8 - Cross Site Scripting (XSS) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productNewsletters	Published08/18/2024	SeverityHigh
`CVE-2024-37227`WordPress Newsletters plugin <= 4.9.7 - Cross Site Request Forgery (CSRF) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productNewsletters	Published06/21/2024	SeverityMedium
`CVE-2024-35718`WordPress Newsletters plugin <= 4.9.5 - Reflected Cross Site Scripting (XSS) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productNewsletters	Published06/08/2024	SeverityHigh
`CVE-2024-32954`WordPress Newsletters plugin <= 4.9.5 - Arbitrary File Upload vulnerability	Exploitation statusNot known exploited	FixYes	Affected productNewsletters	Published04/24/2024	SeverityCritical
`CVE-2024-31354`WordPress Slideshow Gallery LITE plugin <= 1.7.8 - Cross Site Request Forgery (CSRF) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productSlideshow Gallery	Published04/12/2024	SeverityMedium
`CVE-2024-31355`WordPress Slideshow Gallery LITE plugin <= 1.7.8 - Auth. SQL Injection vulnerability	Exploitation statusNot known exploited	FixYes	Affected productSlideshow Gallery	Published04/10/2024	SeverityHigh
`CVE-2024-31353`WordPress Slideshow Gallery LITE plugin <= 1.7.8 - Sensitive Data Exposure vulnerability	Exploitation statusNot known exploited	FixYes	Affected productSlideshow Gallery	Published04/10/2024	SeverityMedium
`CVE-2023-4797`Newsletter Lite < 4.9.3 - Admin+ Command Injection	Exploitation statusPublic exploit	FixYes	Affected productNewsletters	Published01/16/2024	SeverityHigh
`CVE-2023-28491`WordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to SQL Injection	Exploitation statusNot confirmed	FixYes	Affected productSlideshow Gallery LITE	Published12/20/2023	SeverityMedium
`CVE-2023-28497`WordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to Cross Site Request Forgery (CSRF)	Exploitation statusNot known exploited	FixYes	Affected productSlideshow Gallery LITE	Published11/12/2023	SeverityMedium
`CVE-2023-30478`WordPress Newsletters Plugin <= 4.8.8 is vulnerable to Cross Site Request Forgery (CSRF)	Exploitation statusNot known exploited	FixYes	Affected productNewsletters	Published11/10/2023	SeverityMedium
`CVE-2021-24882`Slideshow Gallery < 1.7.4 - Admin+ Stored Cross-Site Scripting	Exploitation statusNot confirmed	FixYes	Affected productSlideshow Gallery	Published11/23/2021	SeverityUnknown
`CVE-2020-35932`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published01/01/2021	SeverityHigh
`CVE-2019-15828`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published08/30/2019	SeverityUnknown
`CVE-2018-20987`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published08/22/2019	SeverityUnknown
`CVE-2019-14788`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published08/15/2019	SeverityUnknown
`CVE-2019-14787`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published08/09/2019	SeverityUnknown
`CVE-2018-18019`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published04/15/2019	SeverityUnknown
`CVE-2018-18018`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published04/15/2019	SeverityUnknown
`CVE-2018-18017`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published04/15/2019	SeverityUnknown
`CVE-2018-17946`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published10/03/2018	SeverityUnknown
`CVE-2014-5460`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published09/11/2014	SeverityUnknown

29 / 29 Results

All vulnerabilities loaded

Security vulnerabilities from Tribulant

Tribulant

Filters

Run an in-depth assessment with complete web risk management

Popular Tribulant products

Newsletters

Slideshow Gallery

Slideshow Gallery LITE