ALO EasyMail Newsletter

ALO EasyMail Newsletter has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2015 and 2016; all 3 are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2016 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 3 of the records (100%).

Every one of the 3 issues recorded for ALO EasyMail Newsletter has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

6.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all ALO EasyMail Newsletter vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2015-9409

ALO EasyMail Newsletter <= 2.6.00 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records


2016-08-01 00:00	ALO EasyMail Newsletter <= 2.9.2 - Cross-Site Request Forgery ALO EasyMail Newsletter < 2.9.3	`N/A`	4.3 Medium	Yorick Koster,	Yes
2016-02-16 00:00	ALO EasyMail Newsletter <= 2.6.01 - Cross-Site Request Forgery ALO EasyMail Newsletter < 2.7.0	`N/A`	5.7 Medium	Mohsen Lotfi	Yes
2015-09-17 00:00	ALO EasyMail Newsletter <= 2.6.00 - Cross-Site Request Forgery to Stored Cross-Site Scripting ALO EasyMail Newsletter < 2.6.01	`CVE-2015-9409`	8.8 High	Anonymous	Yes

Showing 1–3 of 3 reports