Newsletter – Send awesome emails from WordPress
newsletter
Vulnerabilities:
25
Last Updated:
October 6, 2026
Active Installs:
200000
Published
Title
Fixed in
CVSS
Published
2026-10-01
Fixed in
Fixed in 9.4.1
CVSS
7.2 (high)
Published
2026-09-30
Title
Newsletter < 9.4.0 - Unauthenticated Subscriber Token Disclosure via Click-Tracking REST Endpoint
Fixed in
Fixed in 9.4.0
CVSS
4.8 (medium)
Published
2026-09-17
Fixed in
Fixed in 9.3.9
CVSS
6.1 (medium)
Published
2026-09-15
Fixed in
Fixed in 9.3.8
CVSS
4.8 (medium)
Published
2026-09-14
Title
Newsletter < 9.3.7 - Unauthenticated Open Redirect and Subscriber Token Disclosure via ncu Parameter
Fixed in
Fixed in 9.3.7
CVSS
5.3 (medium)
Published
2026-08-19
Fixed in
Fixed in 9.3.4
CVSS
7.2 (high)
Published
2026-01-19
Fixed in
Fixed in 9.1.1
CVSS
4.3 (medium)
Published
2025-12-15
Fixed in
Fixed in 9.1.0
CVSS
4.9 (medium)
Published
2025-05-19
Fixed in
Fixed in 8.8.5
CVSS
3.5 (low)
Published
2025-05-19
Fixed in
Fixed in 8.8.5
CVSS
3.5 (low)
Published
2025-05-13
Fixed in
Fixed in 8.8.2
CVSS
3.5 (low)
Published
2025-04-14
Fixed in
Fixed in 8.7.1
CVSS
3.5 (low)
Published
2024-06-04
Fixed in
Fixed in 8.3.5
CVSS
6.4 (medium)
Published
2024-03-28
Fixed in
Fixed in 8.2.1
CVSS
5.3 (medium)
Published
2023-09-06
Fixed in
Fixed in 7.9.0
CVSS
6.8 (medium)
Published
2023-03-27
Fixed in
Fixed in 7.6.9
CVSS
7.1 (high)
Published
2022-05-30
Fixed in
Fixed in 7.4.6
CVSS
3.4 (low)
Published
2022-05-23
Fixed in
Fixed in 7.4.5
CVSS
3.4 (low)
Published
2020-08-03
Fixed in
Fixed in 6.8.2
CVSS
4.6 (medium)
Published
2020-08-03
Fixed in
Fixed in 6.8.2
CVSS
4.2 (medium)
Published
2020-07-12
Fixed in
Fixed in 6.7.7
CVSS
3.5 (low)
Published
2020-03-16
Fixed in
Fixed in 6.5.4
CVSS
3.1 (low)
Published
2013-05-14
Fixed in
Fixed in 3.2.7
CVSS
5.4 (medium)
Published
2013-02-03
Fixed in
Fixed in 3.0.9
CVSS
6.7 (medium)
