Molongui — Vulnerabilities & Security Advisories 6

Molongui is a WordPress plugin primarily used for email marketing and newsletter functionality. Historically, it has been associated with multiple remote code execution (RCE) vulnerabilities, cross-site scripting (XSS) issues, and privilege escalation flaws. The plugin's security record includes six CVEs, with several allowing unauthenticated attackers to execute arbitrary code or manipulate content. Notable characteristics include insufficient input validation and improper access controls in its subscription and email management features. While no major public incidents have been widely documented, the consistent pattern of vulnerabilities has made it a recurring concern in WordPress security advisories.