Unknown Wp News vulnerabilities

• hasthemes wp news WP News <= 1.1.9 - Arbitrary Plugin Activation via CSRF CVE-2023-0502 6.5 MediumMarch 27, 2023
• sendit project sendit, unknown sendit wp newsletter +1 more Sendit WP Newsletter <= 2.5.1 - Authenticated (admin+) SQL Injection CVE-2021-24345 6.6 MediumJune 14, 2021