| CVE-2026-16264 |
The Newsletters WordPress plugin before 4.18.1 does not perform an ownership check on some of its subscriber…
|
6.5
Medium
|
Sep 23, 2026 |
| CVE-2026-17520 |
The Newsletters WordPress plugin before 4.17 does not generate its API key using a sufficiently random source,…
|
4.8
Medium
|
Aug 29, 2026 |
| CVE-2026-17522 |
The Newsletters WordPress plugin before 4.17 does not perform any nonce or capability check when saving one of its…
|
5.4
Medium
|
Aug 29, 2026 |
| CVE-2026-16267 |
The Newsletters WordPress plugin before 4.16 does not restrict the classes allowed when unserialising a value taken from…
|
8.1
High
|
Aug 8, 2026 |
| CVE-2026-16269 |
The Newsletters WordPress plugin before 4.16 does not strictly compare its API authentication key, allowing…
|
4.8
Medium
|
Aug 8, 2026 |
| CVE-2026-16268 |
The Newsletters WordPress plugin before 4.16 does not authenticate or validate a bounce-processing request before…
|
8.2
High
|
Aug 6, 2026 |
| CVE-2026-12583 |
The Newsletters WordPress plugin before 4.15 does not prevent deserialization of untrusted input that is stored…
|
8.1
High
|
Jul 14, 2026 |
| CVE-2023-4797 |
The Newsletters WordPress plugin before 4.9.3 does not properly escape user-controlled parameters when they are appended…
|
7.2
High
|
Jan 16, 2024 |