WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
news-wall
Published
2024-03-28
Title
News Wall <= 1.1.0 - Cross-Site Request Forgery to Plugin Settings Update
Slug
newsboard
Published
2025-04-09
Title
NewsBoard Post and RSS Scroller <= 1.2.12 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
newsletter
Published
2013-02-03
Title
Newsletter < 3.0.9 - SQL Injection
Slug
newsletter
Published
2013-05-14
Title
Newsletter < 3.2.7 - Cross-Site Scripting (XSS)
Slug
newsletter
Published
2015-03-30
Title
Newsletter 3.7.0 - Open Redirect
Slug
newsletter
Published
2020-03-16
Title
Newsletter < 6.5.4 - CSV Injection
Slug
newsletter
Published
2020-07-12
Title
Newsletter < 6.7.7 - Authenticated Stored Cross-Site Scripting
Slug
newsletter
Published
2020-08-03
Title
Newsletter < 6.8.2 - Authenticated Cross-Site Scripting (XSS)
Slug
newsletter
Published
2020-08-03
Title
Newsletter < 6.8.2 - Authenticated PHP Object Injection
Slug
newsletter
Published
2022-05-23
Title
Newsletter < 7.4.5 - Reflected Cross-Site Scripting
Slug
newsletter
Published
2022-05-30
Title
Newsletter < 7.4.6 - Admin+ Stored Cross-Site Scripting
Slug
newsletter
Published
2023-03-27
Title
Newsletter < 7.6.9 - Reflected XSS
Slug
newsletter
Published
2023-09-06
Title
Newsletter < 7.9.0 - Contributor+ Stored XSS
Slug
newsletter
Published
2024-03-28
Title
Newsletter < 8.2.1 - IP Spoofing
Slug
newsletter
Published
2024-06-04
Title
Newsletter < 8.3.5 - Unauthenticated Stored Cross-Site Scripting via np1
Slug
newsletter
Published
2025-04-14
Title
Newsletter < 8.7.1 - Admin+ Stored XSS
Slug
newsletter
Published
2025-05-13
Title
Newsletter < 8.8.2 - Admin+ Stored XSS via Subscription
Slug
newsletter
Published
2025-05-19
Title
Newsletter < 8.8.5 - Admin+ Stored XSS via Form
Slug
newsletter
Published
2025-05-19
Title
Newsletter < 8.8.5 - Admin+ Stored XSS via Widget
Slug
newsletter
Published
2025-12-15
Title
Newsletter < 9.1.0 - Authenticated (Administrator+) SQL Injection
Slug
newsletter
Published
2026-01-19
Title
Newsletter – Send awesome emails from WordPress < 9.1.1 - Cross-Site Request Forgery to Newsletter Unsubscription
Slug
newsletter-api
Published
2024-06-11
Title
Newsletter - API v1 and v2 addon for Newsletter < 2.4.6 - Missing Authorization to Email Subscribers Management
Slug
newsletter-bulk-email
Published
2023-10-13
Title
Newsletter & Bulk Email Sender <= 2.0.1 - Contributor+ Stored XSS
Slug
newsletter-by-supsystic
Published
2017-05-23
Title
Newsletter by Supsystic - Authenticated Stored XSS & CSRF
Slug
newsletter-by-supsystic
Published
2021-02-08
Title
Newsletter by Supsystic <= 1.5.6 - Authenticated SQL Injection