| CVE-2026-16264 |
The Newsletters WordPress plugin before 4.18.1 does not perform an ownership check on some of its subscriber…
|
6.5
Moyenne
|
23 sept. 2026 |
| CVE-2026-17520 |
The Newsletters WordPress plugin before 4.17 does not generate its API key using a sufficiently random source,…
|
4.8
Moyenne
|
29 août 2026 |
| CVE-2026-17522 |
The Newsletters WordPress plugin before 4.17 does not perform any nonce or capability check when saving one of its…
|
5.4
Moyenne
|
29 août 2026 |
| CVE-2026-16267 |
The Newsletters WordPress plugin before 4.16 does not restrict the classes allowed when unserialising a value taken from…
|
8.1
Élevée
|
8 août 2026 |
| CVE-2026-16269 |
The Newsletters WordPress plugin before 4.16 does not strictly compare its API authentication key, allowing…
|
4.8
Moyenne
|
8 août 2026 |
| CVE-2026-16268 |
The Newsletters WordPress plugin before 4.16 does not authenticate or validate a bounce-processing request before…
|
8.2
Élevée
|
6 août 2026 |
| CVE-2026-12583 |
The Newsletters WordPress plugin before 4.15 does not prevent deserialization of untrusted input that is stored…
|
8.1
Élevée
|
14 juil. 2026 |
| CVE-2023-4797 |
The Newsletters WordPress plugin before 4.9.3 does not properly escape user-controlled parameters when they are appended…
|
7.2
Élevée
|
16 janv. 2024 |