Security
فارسی
All products

newsletter

WordPress · Plugin
24 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Newsletter <= 9.4.0 - Unauthenticated Stored Cross-Site Scripting via 'np1' Custom Field ParameterCVE-2026-96566 newsletter WordPress High Fix reported
Newsletter <= 9.3.9 - Unauthenticated Insufficiently Protected Credentials via '/tnp/l/' Click-Tracking REST Endpoint (Raw Subscriber Token Cookie Disclosure)CVE-2026-92537 newsletter WordPress Medium Fix reported
Newsletter <= 9.3.8 - Reflected Cross-Site Scripting via 'nn' ParameterCVE-2026-90981 newsletter WordPress Medium Fix reported
Newsletter – Send awesome emails from WordPress <= 9.3.3 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-66596 newsletter WordPress High Fix reported
Newsletter – Send awesome emails from WordPress <= 9.1.0 - Cross-Site Request Forgery to Newsletter UnsubscriptionCVE-2026-1051 newsletter WordPress Medium Fix reported
Newsletter <= 9.0.9 - Authenticated (Administrator+) SQL InjectionCVE-2025-67999 newsletter WordPress Medium Fix reported
Newsletter <= 8.8.4 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2025-3582 newsletter WordPress Medium Fix reported
Newsletter <= 8.8.4 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2025-3581 newsletter WordPress Medium Fix reported
Newsletter <= 8.8.1 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2025-3584 newsletter WordPress Medium Fix reported
Newsletter <= 8.7.0 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2025-3583 newsletter WordPress Medium Fix reported
Newsletter <= 8.3.4 - Unauthenticated Stored Cross-Site Scripting via np1CVE-2024-5317 newsletter WordPress Medium Fix reported
Newsletter <= 8.0.6 - Cross-Site Request ForgeryCVE-2024-31434 newsletter WordPress Medium Fix reported
Newsletter <= 8.2.0 - IP SpoofingCVE-2024-30522 newsletter WordPress Medium Fix reported
Newsletter <= 7.6.8 - Reflected Cross-Site ScriptingCVE-2023-27922 newsletter WordPress Medium Fix reported
Newsletter <= 6.5.3 - CSV Injection newsletter WordPress Medium Fix reported
Newsletter – Send awesome emails from WordPress <= 7.4.4 - Reflected Cross-Site ScriptingCVE-2022-1756 newsletter WordPress Medium Fix reported
Newsletter <= 3.8.2 - Open Redirect newsletter WordPress Medium Fix reported
Newsletter <= 6.8.1 - Authenticated PHP Object InjectionCVE-2020-35932 newsletter WordPress High Fix reported
Newsletter <= 3.2.6 - Reflected Cross-Site Scripting newsletter WordPress Medium Fix reported
Newsletter <= 7.4.5 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2022-1889 newsletter WordPress Medium Fix reported