Arigato Autoresponder and Newsletter

Explore Arigato Autoresponder and Newsletter vulnerabilities across all versions. Currently tracking 18 known vulnerabilities, including severity, impact, and patch status.

01234567891016.01.2010Today18.09.20186.1Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting CVSS 6.1 · 18.09.20186.1Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting CVSS 6.1 · 18.09.20186.1Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting CVSS 6.1 · 18.09.20186.1Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting CVSS 6.1 · 18.09.20186.1Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting CVSS 6.1 · 18.09.20187.2Arigato Autoresponder and Newsletter <= 2.5.1.8 - SQL Injection CVSS 7.2 · 18.09.20184.8Arigato Autoresponder and Newsletter <= 2.5.1.8 - Cross-Site Scripting CVSS 4.8 · 18.09.20186.1Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting CVSS 6.1 · 18.09.20186.1Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting CVSS 6.1 · 18.09.20184.8Arigato Autoresponder and Newsletter <= 2.5.1.8 - Cross-Site Scripting CVSS 4.8 · 18.09.201817.10.20189.8Arigato Autoresponder and Newsletter <= 2.7 - Arbitrary File Upload CVSS 9.8 · 17.10.201831.01.20234.4Arigato Autoresponder and Newsletter <= 2.1.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting CVSS 4.4 · 31.01.202302.02.20236.4Arigato Autoresponder and Newsletter <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 02.02.202306.02.20235.5Arigato Autoresponder and Newsletter <= 2.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting CVSS 5.5 · 06.02.20237.2Arigato Autoresponder and Newsletter <= 2.7.1 - Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 06.02.202309.11.20234.3Arigato Autoresponder and Newsletter <= 2.7.2.2 - Cross-Site Request Forgery CVSS 4.3 · 09.11.202309.05.20244.3Arigato Autoresponder and Newsletter <= 2.7.2.3 - Cross-Site Request Forgery CVSS 4.3 · 09.05.202417.04.20256.1Arigato Autoresponder and Newsletter <= 2.7.2.4 - Reflected Cross-Site Scripting CVSS 6.1 · 17.04.2025

Strategic Overview

Avg CVSSMedium
6.0/ 10
Patch Coverage94%
Open

1

Fixed

17

Get automatic notifications for all Arigato Autoresponder and Newsletter vulnerabilities before they are exploited.

Vulnerability Records

18 records
2025-04-17 00:00CVE-2025-39594
6.1
Medium
Le Ngoc AnhYes
2024-05-09 00:00CVE-2024-34823
4.3
Medium
Dhabaleshwar DasYes
2023-11-09 00:00CVE-2023-47686
4.3
Medium
Nguyen Xuan ChienYes
2023-02-06 00:00CVE-2023-25031
5.5
Medium
Rafshanzani SuhadaYes
2023-02-06 00:00CVE-2023-25020
7.2
High
Rafshanzani SuhadaYes
2023-02-02 00:00CVE-2023-25061
6.4
Medium
Rafshanzani SuhadaYes
2023-01-31 00:00CVE-2023-0543
4.4
Medium
Felipe Restrepo Rodriguez (pfelilpe)Yes
2018-10-17 00:00CVE-2018-18461
9.8
Critical
rakjongNo
2018-09-18 00:00CVE-2018-1002007
6.1
Medium
Larry W. CashdollarYes
2018-09-18 00:00CVE-2018-1002009
6.1
Medium
Larry W. CashdollarYes
Showing 1–10 of 18 reports
Arigato Autoresponder and Newsletter banner
Latestv2.7.2.7

Arigato Autoresponder and Newsletter

Bob

Author

Bob

4.7(34)
94/100
Last Updated
2025-08-14 (1y ago)
Active Installs
500+
Downloads
118,763
Requires WP
5.0+
Requires PHP
8.0+
Tested up to
WP 6.8.6
Created
2010-01-16 (17y ago)

Arigato PRO | FAQ This powerful email marketing plugin allows scheduling of automated autoresponder messages and newsletters, and managing a mailing list. Use it for all kind of drip marketing campaigns, email based courses, product or service updates, and many more. Features Unlimited number of subscribers Unlimited number of newsletters Unlimited number of auto-responder / drip marketing email messages Import and exports members from / to CSV file Send messages X days after user registration Send messages on fixed dates Send newsletters / news flashes Add attachments Double opt-in Google reCaptcha against spam Question based captcha Selected user role can manage the auto-responder Sends hooks for integration with other plugins Redirecting after registration Optional admin notifications on subscribe / unsubscribe Automatically subscribe users who register on your site / blog (optional) Automatically create WP user accounts for mailing list subscribers (optional) Optional public newsletters archive Detailed email log Compatible with all SMTP plugins: will send emails through them GDPR compliance features Webhooks for integration to CRM and any other systemsthrough Zapier and similar services PHP 6, PHP 7, PHP 8 compatible Always updated and supported Integrations Built-in integration with Contact Form 7 Built-in integration with Jetpack Contact Form Built-in integration with Ninja Forms Built-in integration with Formidable Forms Built-in integration with WPForms Hooks The plugin will send the following hooks: do_action(&#8216;arigato_subscribed’, $status, $user_id) – when an user subscribes. The variable $status is true when the subscription is immediately activated and false if email confirmation is required, do_action(&#8216;arigato_confirmed’, $member->id) – when a subscriber confirms their email address. do_action(&#8216;arigato_unsubscribed’, $user) – when a subscriber unsubscribes. Sends the user object and not the ID so you don’t need to run a select query with this action. do_action(&#8216;arigato_welcome_email’, $user_id, $mail, $user) – when the user receives a welcome (first “0 days” email). do_action(&#8216;arigato_subscribed’, $status, $user_id) – called when the new user subscribes. The argument $status is true when the subscriber is already activated and false when double optin confirmation is expected. do_action(“arigato_cron_job_ran”) – called when the plugin completes the cron job (once on each run). No arguments passed. do_action(“arigato_sent_newsletter”, $newsletter_id, $num_mails_sent) – called after sending newsletter. Passes the newsletter ID and the number of emails sent. Community Translations Swedish translation available thanks to Patrik: .po / .mo German translation available thanks to @mpek: .po / .mo Japanese translation is included thanks to Takeshi Abe

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C