WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
newsletters-lite
Published
2025-03-27
Title
Newsletters < 4.9.9.8 - Authenticated (Administrator+) SQL Injection
Slug
newsletters-lite
Published
2025-05-12
Title
Newsletters < 4.9.9.9 - Authenticated (Contributor+) SQL Injection orderby Parameter
Slug
newsletters-lite
Published
2025-05-30
Title
Newsletters < 4.10 - Authenticated (Administrator+) Local File Inclusion
Slug
newsletters-lite
Published
2025-07-16
Title
Newsletters < 4.11 - Cross-Site Request Forgery
Slug
newsletters-lite
Published
2025-07-29
Title
Newsletters < 4.11 - Unauthenticated Local File Inclusion
Slug
newsletters-lite
Published
2025-12-28
Title
Newsletters < 4.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
newsletters-lite
Published
2025-12-31
Title
Newsletters < 4.12 - Unauthenticated PHP Object Injection
Slug
newsletters-lite
Published
2026-06-09
Title
Newsletters < 4.14 - Unauthenticated SQL Injection via wpmlsubscriber_id Parameter
Slug
newsletters-lite
Published
2026-06-18
Title
Newsletters < 4.14 - Missing Authorization
Slug
newsletters-lite
Published
2026-06-26
Title
Newsletters < 4.14 - Missing Authorization
Slug
newsletters-lite
Published
2026-06-23
Title
Newsletters < 4.15 - Unauthenticated PHP Object Injection via Subscriber Custom Field
Slug
newsletters-lite
Published
2026-07-08
Title
Newsletters < 4.15 - Unauthenticated Stored Cross-Site Scripting
Slug
newsmanapp
Published
2024-12-12
Title
NewsmanApp < 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
newsmanapp
Published
2025-09-26
Title
NewsmanApp < 3.0.0 - Cross-Site Request Forgery
Slug
newspack-ads
Published
2024-07-01
Title
Newspack Ads < 1.47.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
newspack-blocks
Published
2024-06-20
Title
Newspack Blocks < 3.0.9 - Unauthenticated Sensitive Information Exposure
Slug
newspack-blocks
Published
2024-06-28
Title
Newspack Blocks < 3.0.9 - Authenticated (Contributor+) Arbitrary File Upload
Slug
newspack-blocks
Published
2024-06-28
Title
Newspack Blocks < 3.0.9 - Authenticated (Contributor+) Arbitrary Directory Deletion
Slug
newspack-blocks
Published
2024-06-28
Title
Newspack Blocks < 3.0.9 - Missing Authorization
Slug
newspack-content-converter
Published
2024-07-01
Title
Newspack Content Converter < 1.0.0 - Missing Authorization
Slug
newspack-newsletters
Published
2024-06-21
Title
Newspack Newsletters < 2.13.3 - Cross-Site Request Forgery
Slug
newspack-newsletters
Published
2024-07-01
Title
Newspack Newsletters < 2.13.3 - Missing Authorization
Slug
newspack-newsletters
Published
2025-06-05
Title
Newspack Newsletters < 3.14.0 - Open Redirect
Slug
newspack-popups
Published
2024-07-01
Title
Newspack Campaigns < 2.31.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
newsplugin
Published
2021-07-21
Title
NewsPlugin < 1.1.0 - CSRF to Stored Cross-Site Scripting