VULNERABILITY INTELLIGENCE

CVE-2021-34634

CVSS score8.8 HIGH

EPSS probability0.70%

CISA KEVNot currently listed

Published2021-08-05

Last modified2026-06-17

Description

The Nifty Newsletters WordPress plugin is vulnerable to Cross-Site Request Forgery via the sola_nl_wp_head function found in the ~/sola-newsletters.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 4.0.23.