WPScan
How it worksPricing
Vulnerabilities
WordPressPluginsThemesStatsSubmit vulnerabilities
For developers
StatusAPI detailsCLI scanner
Contact

WordPress Plugin Vulnerabilities

Newsletter – Send awesome emails from WordPress

2023-09-06
Newsletter < 7.9.0 - Contributor+ Stored XSS
Fixed in version 7.9.0
2023-03-27
Newsletter < 7.6.9 - Reflected XSS
Fixed in version 7.6.9
2022-05-30
Newsletter < 7.4.6 - Admin+ Stored Cross-Site Scripting
Fixed in version 7.4.6
2022-05-23
Newsletter < 7.4.5 - Reflected Cross-Site Scripting
Fixed in version 7.4.5
2020-08-03
Newsletter < 6.8.2 - Authenticated Cross-Site Scripting (XSS)
Fixed in version 6.8.2
2020-08-03
Newsletter < 6.8.2 - Authenticated PHP Object Injection
Fixed in version 6.8.2
2020-07-12
Newsletter < 6.7.7 - Authenticated Stored Cross-Site Scripting
Fixed in version 6.7.7
2020-03-16
Newsletter < 6.5.4 - CSV Injection
Fixed in version 6.5.4
2015-03-30
Newsletter 3.7.0 - Open Redirect
Fixed in version 3.8.3
2013-05-14
Newsletter < 3.2.7 - Cross-Site Scripting (XSS)
Fixed in version 3.2.7
2013-02-03
Newsletter < 3.0.9 - SQL Injection
Fixed in version 3.0.9