WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
newsletters-from-rss-to-email-newsletters-using-nourish
Published
2025-12-04
Title
Nouri.sh Newsletter <= 1.0.1.3 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Slug
newsletters-lite
Published
2017-05-31
Title
Tribulant Newsletters < 4.6.5 – Multiple Vulnerabilities
Slug
newsletters-lite
Published
2019-07-01
Title
Newsletter Lite < 4.6.19 - Multiple Issues
Slug
newsletters-lite
Published
2018-03-12
Title
Newsletters Lite < 4.6.8.6 - PHP Object Injection
Slug
newsletters-lite
Published
2023-10-05
Title
Newsletter Lite < 4.9.3 - Admin+ Command Injection
Slug
newsletters-lite
Published
2024-04-22
Title
Newsletters < 4.9.6 - Authenticated (Admin+) Arbitrary File Upload
Slug
newsletters-lite
Published
2024-04-22
Title
Newsletters < 4.9.6 - Information Exposure via Log files
Slug
newsletters-lite
Published
2024-06-06
Title
Newsletters < 4.9.6 - Reflected Cross-Site Scripting
Slug
newsletters-lite
Published
2024-06-21
Title
Newsletters < 4.9.8 - Cross-Site Request Forgery
Slug
newsletters-lite
Published
2024-08-14
Title
Newsletters < 4.9.9.1 - Unauthenticated Full Path Disclosure
Slug
newsletters-lite
Published
2024-08-16
Title
Newsletters < 4.9.9 - Reflected Cross-Site Scripting
Slug
newsletters-lite
Published
2024-09-05
Title
Newsletters < 4.9.9.3 - Authenticated Privilege Escalation
Slug
newsletters-lite
Published
2024-09-27
Title
Newsletters < 4.9.9.2 - Reflected Cross-Site Scripting
Slug
newsletters-lite
Published
2024-10-28
Title
Newsletters < 4.9.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via newsletters_video Shortcode
Slug
newsletters-lite
Published
2024-12-26
Title
Newsletters < 4.9.9.7 - Reflected Cross-Site Scripting
Slug
newsletters-lite
Published
2025-03-21
Title
Newsletters < 4.9.9.8 - Reflected Cross-Site Scripting via To Parameter
Slug
newsletters-lite
Published
2025-03-25
Title
Newsletters < 4.9.9.8 - Unauthenticated Stored Cross-Site Scripting
Slug
newsletters-lite
Published
2025-03-27
Title
Newsletters < 4.9.9.8 - Authenticated (Administrator+) SQL Injection
Slug
newsletters-lite
Published
2025-05-12
Title
Newsletters < 4.9.9.9 - Authenticated (Contributor+) SQL Injection orderby Parameter
Slug
newsletters-lite
Published
2025-05-30
Title
Newsletters < 4.10 - Authenticated (Administrator+) Local File Inclusion
Slug
newsletters-lite
Published
2025-07-16
Title
Newsletters < 4.11 - Cross-Site Request Forgery
Slug
newsletters-lite
Published
2025-07-29
Title
Newsletters < 4.11 - Unauthenticated Local File Inclusion
Slug
newsletters-lite
Published
2025-12-28
Title
Newsletters <= 4.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
newsletters-lite
Published
2025-12-31
Title
Newsletters < 4.12 - Unauthenticated PHP Object Injection
Slug
newsmanapp
Published
2024-12-12
Title
NewsmanApp < 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting