Security
فارسی
All products

newsletters-lite

WordPress · Plugin
45 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Newsletters <= 4.18.1 - Authenticated (Subscriber+) SQL Injection via 'id' ParameterCVE-2026-101325 newsletters-lite WordPress Medium Fix reported
Newsletters <= 4.18.1 - Unauthenticated PHP Object InjectionCVE-2026-94075 newsletters-lite WordPress High Fix reported
Newsletters <= 4.18.2 - Cross-Site Request ForgeryCVE-2026-116863 newsletters-lite WordPress Medium No fix reported
Newsletters <= 4.18.1 - Unauthenticated SQL InjectionCVE-2026-111402 newsletters-lite WordPress High Fix reported
Newsletters <= 4.18.0 - Unauthenticated Insecure Direct Object ReferenceCVE-2026-16264 newsletters-lite WordPress Medium Fix reported
Newsletters <= 4.18 - Authenticated (Administrator+) SQL InjectionCVE-2026-66619 newsletters-lite WordPress Medium Fix reported
Newsletters <= 4.15 - Unauthenticated API Authorization Bypass via Type JugglingCVE-2026-16269 newsletters-lite WordPress High Fix reported
Newsletters < 4.17 - Insufficient AuthorizationCVE-2026-17520 newsletters-lite WordPress Medium Fix reported
Newsletters < 4.17 - Cross-Site Request ForgeryCVE-2026-17522 newsletters-lite WordPress Medium Fix reported
Newsletters <= 4.17 - Missing Authorization to Authenticated (Author+) Arbitrary Modification via 'newsletters_mailinglistsroles' POST ParameterCVE-2026-75908 newsletters-lite WordPress Medium Fix reported
Newsletters <= 4.15 - Unauthenticated Server-Side Request ForgeryCVE-2026-16268 newsletters-lite WordPress High Fix reported
Newsletters <= 4.15 - Unauthenticated PHP Object InjectionCVE-2026-16267 newsletters-lite WordPress High Fix reported
Newsletters <= 4.14 - Unauthenticated PHP Object InjectionCVE-2026-12583 newsletters-lite WordPress High Fix reported
Newsletters <= 4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Shortcode AttributeCVE-2026-12939 newsletters-lite WordPress Medium Fix reported
Newsletters <= 4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'target' Shortcode AttributeCVE-2026-12938 newsletters-lite WordPress Medium Fix reported
Newsletters <= 4.14 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-57394 newsletters-lite WordPress High Fix reported
Newsletters <= 4.13 - Missing AuthorizationCVE-2026-57645 newsletters-lite WordPress Medium Fix reported
Newsletters <= 4.13 - Missing AuthorizationCVE-2026-54840 newsletters-lite WordPress Medium Fix reported
Newsletters <= 4.13 - Unauthenticated SQL Injection via wpmlsubscriber_id ParameterCVE-2026-3018 newsletters-lite WordPress High Fix reported
Newsletters <= 4.12 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-69020 newsletters-lite WordPress Medium Fix reported