| CVE-2026-86824 |
The Newsletter WordPress plugin before 9.3.8 does not generate its email tracking signing key with sufficient entropy…
|
4.8
Medium
|
Sep 17, 2026 |
| CVE-2026-86823 |
The Newsletter WordPress plugin before 9.3.7 does not validate the destination of the redirect performed after a public…
|
5.3
Medium
|
Sep 16, 2026 |
| CVE-2025-3582 |
The Newsletter WordPress plugin before 8.85 does not sanitise and escape some of its Form settings, which could allow…
|
4.8
Medium
|
Jun 9, 2025 |
| CVE-2025-3581 |
The Newsletter WordPress plugin before 8.8.5 does not validate and escape some of its Widget options before…
|
4.8
Medium
|
Jun 9, 2025 |
| CVE-2025-3584 |
The Newsletter WordPress plugin before 8.8.2 does not sanitise and escape some of its Subscription settings, which…
|
4.8
Medium
|
Jun 3, 2025 |
| CVE-2025-3583 |
The Newsletter WordPress plugin before 8.7.1 does not sanitise and escape some of its settings, which could allow…
|
3.5
Low
|
May 5, 2025 |