WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
newsletter
Published
2025-12-15
Title
Newsletter < 9.1.0 - Authenticated (Administrator+) SQL Injection
Slug
newsletter-api
Published
2024-06-11
Title
Newsletter - API v1 and v2 addon for Newsletter < 2.4.6 - Missing Authorization to Email Subscribers Management
Slug
newsletter-bulk-email
Published
2023-10-13
Title
Newsletter & Bulk Email Sender <= 2.0.1 - Contributor+ Stored XSS
Slug
newsletter-by-supsystic
Published
2017-05-23
Title
Newsletter by Supsystic - Authenticated Stored XSS & CSRF
Slug
newsletter-by-supsystic
Published
2021-02-08
Title
Newsletter by Supsystic <= 1.5.6 - Authenticated SQL Injection
Slug
newsletter-email-subscribe
Published
2026-01-06
Title
Newsletter Email Subscribe <= 2.4 - Cross-Site Request Forgery to Plugin Settings Update
Slug
newsletter-image-generator
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
newsletter-manager
Published
2014-08-01
Title
Newsletter Manager < 1.0.2 - Authenticated Reflected Cross Site Scripting
Slug
newsletter-manager
Published
2014-08-01
Title
Newsletter Manager < 1.0.2 - Cross-Site Request Forgery
Slug
newsletter-manager
Published
2019-05-18
Title
Newsletter Manager < 1.5 - Unauthenticated Open Redirect
Slug
newsletter-manager
Published
2020-12-29
Title
Newsletter Manager <= 1.5.1 - Unauthenticated Insecure Deserialisation
Slug
newsletter-optin-box
Published
2022-01-17
Title
Noptin < 1.6.5 - Open Redirect
Slug
newsletter-optin-box
Published
2024-07-01
Title
Noptin < 3.4.3 - Missing Authorization to Unauthenticated Form Submission
Slug
newsletter-optin-box
Published
2025-06-12
Title
Noptin < 4.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
newsletter-page-redirects
Published
2024-12-18
Title
AI Magic < 1.0.6 - Unauthenticated Privilege Escalation
Slug
newsletter-popup
Published
2023-05-02
Title
Newsletter Popup <= 1.2 - Unauthenticated Stored XSS
Slug
newsletter-popup
Published
2023-05-02
Title
Newsletter Popup <= 1.2 - Record Deletion via CSRF
Slug
newsletter-popup
Published
2024-04-25
Title
Newsletter Popup <= 1.2 - Admin+ Stored XSS
Slug
newsletter-popup
Published
2024-04-25
Title
Newsletter Popup <= 1.2 - List Deletion via CSRF
Slug
newsletter-popup
Published
2024-04-25
Title
Newsletter Popup <= 1.2 - Subscriber Deletion via CSRF
Slug
newsletter-popup
Published
2024-04-25
Title
Newsletter Popup <= 1.2 - Unauthenticated Stored XSS
Slug
newsletter-subscription-widget-for-sendblaster
Published
2025-08-25
Title
Newsletter subscription optin module <= 1.2.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
newsletter-subscriptions
Published
2024-12-11
Title
Newsletter Subscriptions <= 2.1 - Reflected Cross-Site Scripting
Slug
newsletter2go
Published
2024-03-11
Title
Newsletter2Go <= 4.0.13 - Authenticated(Subscriber+) Stored Cross-Site Scripting via style
Slug
newsletter2go
Published
2025-01-08
Title
Newsletter2Go <= 4.0.14 - Missing Authorization to Authenticated (Subscriber+) Style Reset