WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
newsletters-lite
Published
2024-09-27
Title
Newsletters < 4.9.9.2 - Reflected Cross-Site Scripting
Slug
newsletters-lite
Published
2024-10-28
Title
Newsletters < 4.9.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via newsletters_video Shortcode
Slug
newsletters-lite
Published
2024-12-26
Title
Newsletters < 4.9.9.7 - Reflected Cross-Site Scripting
Slug
newsletters-lite
Published
2025-03-21
Title
Newsletters < 4.9.9.8 - Reflected Cross-Site Scripting via To Parameter
Slug
newsletters-lite
Published
2025-03-25
Title
Newsletters < 4.9.9.8 - Unauthenticated Stored Cross-Site Scripting
Slug
newsletters-lite
Published
2025-03-27
Title
Newsletters < 4.9.9.8 - Authenticated (Administrator+) SQL Injection
Slug
newsletters-lite
Published
2025-05-12
Title
Newsletters < 4.9.9.9 - Authenticated (Contributor+) SQL Injection orderby Parameter
Slug
newsletters-lite
Published
2025-05-30
Title
Newsletters < 4.10 - Authenticated (Administrator+) Local File Inclusion
Slug
newsletters-lite
Published
2025-07-16
Title
Newsletters < 4.11 - Cross-Site Request Forgery
Slug
newsletters-lite
Published
2025-07-29
Title
Newsletters < 4.11 - Unauthenticated Local File Inclusion
Slug
newsletters-lite
Published
2025-12-28
Title
Newsletters < 4.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
newsletters-lite
Published
2025-12-31
Title
Newsletters < 4.12 - Unauthenticated PHP Object Injection
Slug
newsletters-lite
Published
2026-06-09
Title
Newsletters < 4.14 - Unauthenticated SQL Injection via wpmlsubscriber_id Parameter
Slug
newsletters-lite
Published
2026-06-18
Title
Newsletters < 4.14 - Missing Authorization
Slug
newsletters-lite
Published
2026-06-26
Title
Newsletters < 4.14 - Missing Authorization
Slug
newsletters-lite
Published
2026-06-23
Title
Newsletters < 4.15 - Unauthenticated PHP Object Injection via Subscriber Custom Field
Slug
newsletters-lite
Published
2026-07-08
Title
Newsletters < 4.15 - Unauthenticated Stored Cross-Site Scripting
Slug
newsletters-lite
Published
2026-07-28
Title
Newsletters < 4.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'target' Shortcode Attribute
Slug
newsletters-lite
Published
2026-07-28
Title
Newsletters < 4.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Shortcode Attribute
Slug
newsletters-lite
Published
2026-07-30
Title
Newsletters < 4.16 - Unauthenticated Server-Side Request Forgery via SNS Bounce Handler
Slug
newsletters-lite
Published
2026-08-03
Title
Newsletters < 4.16 - Unauthenticated API Authentication Bypass via Type Juggling
Slug
newsletters-lite
Published
2026-08-03
Title
Newsletters < 4.16 - Unauthenticated PHP Object Injection via Date Form Field
Slug
newsletters-lite
Published
2026-08-24
Title
Newsletters < 4.18 - Missing Authorization to Authenticated (Author+) Arbitrary Modification via 'newsletters_mailinglistsroles' POST Parameter
Slug
newsletters-lite
Published
2026-08-27
Title
Newsletters < 4.17 - Unauthenticated API Access via Predictable API Key
Slug
newsletters-lite
Published
2026-08-27
Title
Newsletters < 4.17 - Arbitrary Plugin Option Update via CSRF