The Arigato Autoresponder and Newsletter by Kiboko Labs plugin allows scheduling of automated autoresponder messages and newsletters, and managing a mailing list. You can add/edit/delete and import/export members. There is also a registration form which can be placed in any website or blog. You can schedule unlimited number of email messages. Messages can be sent on defined number of days after user registration, or on a fixed date.
9 cross site script (XSS) exploits and a blind SQL injection vulnerability were found in WordPress Arigato Autoresponder and Newsletter v2.5.1.8. These vulnerabilities require administrative privileges to exploit. There is an exploitable blind SQL injection vulnerability via the del_ids variable by POST request.
Resource | Hyperlink |
|---|---|
| Vapidlabs | http://www.vapidlabs.com/advisory.php?v=203 |
| WordPress Plugin | https://wordpress.org/plugins/bft-autoresponder/ |
| National Vulnerability Database | https://nvd.nist.gov/vuln/detail/CVE-2018-1002000 |
| Exploit Database | https://www.exploit-db.com/exploits/45434 |
