WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
newsletter-email-subscribe
Published
2026-01-06
Title
Newsletter Email Subscribe <= 2.4 - Cross-Site Request Forgery to Plugin Settings Update
Slug
newsletter-image-generator
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
newsletter-manager
Published
2014-08-01
Title
Newsletter Manager < 1.0.2 - Authenticated Reflected Cross Site Scripting
Slug
newsletter-manager
Published
2014-08-01
Title
Newsletter Manager < 1.0.2 - Cross-Site Request Forgery
Slug
newsletter-manager
Published
2019-05-18
Title
Newsletter Manager < 1.5 - Unauthenticated Open Redirect
Slug
newsletter-manager
Published
2020-12-29
Title
Newsletter Manager <= 1.5.1 - Unauthenticated Insecure Deserialisation
Slug
newsletter-optin-box
Published
2022-01-17
Title
Noptin < 1.6.5 - Open Redirect
Slug
newsletter-optin-box
Published
2024-07-01
Title
Noptin < 3.4.3 - Missing Authorization to Unauthenticated Form Submission
Slug
newsletter-optin-box
Published
2025-06-12
Title
Noptin < 4.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
newsletter-page-redirects
Published
2024-12-18
Title
AI Magic < 1.0.6 - Unauthenticated Privilege Escalation
Slug
newsletter-popup
Published
2023-05-02
Title
Newsletter Popup <= 1.2 - Unauthenticated Stored XSS
Slug
newsletter-popup
Published
2023-05-02
Title
Newsletter Popup <= 1.2 - Record Deletion via CSRF
Slug
newsletter-popup
Published
2024-04-25
Title
Newsletter Popup <= 1.2 - Admin+ Stored XSS
Slug
newsletter-popup
Published
2024-04-25
Title
Newsletter Popup <= 1.2 - List Deletion via CSRF
Slug
newsletter-popup
Published
2024-04-25
Title
Newsletter Popup <= 1.2 - Subscriber Deletion via CSRF
Slug
newsletter-popup
Published
2024-04-25
Title
Newsletter Popup <= 1.2 - Unauthenticated Stored XSS
Slug
newsletter-subscription-widget-for-sendblaster
Published
2025-08-25
Title
Newsletter subscription optin module <= 1.2.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
newsletter-subscriptions
Published
2024-12-11
Title
Newsletter Subscriptions <= 2.1 - Reflected Cross-Site Scripting
Slug
newsletter2go
Published
2024-03-11
Title
Newsletter2Go <= 4.0.13 - Authenticated(Subscriber+) Stored Cross-Site Scripting via style
Slug
newsletter2go
Published
2025-01-08
Title
Newsletter2Go <= 4.0.14 - Missing Authorization to Authenticated (Subscriber+) Style Reset
Slug
newsletters-from-rss-to-email-newsletters-using-nourish
Published
2025-12-04
Title
Nouri.sh Newsletter <= 1.0.1.3 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Slug
newsletters-lite
Published
2017-05-31
Title
Tribulant Newsletters < 4.6.5 – Multiple Vulnerabilities
Slug
newsletters-lite
Published
2019-07-01
Title
Newsletter Lite < 4.6.19 - Multiple Issues
Slug
newsletters-lite
Published
2018-03-12
Title
Newsletters Lite < 4.6.8.6 - PHP Object Injection
Slug
newsletters-lite
Published
2023-10-05
Title
Newsletter Lite < 4.9.3 - Admin+ Command Injection