Vendor

    Tribulant Software

    17 known vulnerabilities in products by Tribulant Software, 0 of them actively exploited (CISA KEV).

    Key figures

    17

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Tribulant Software
    CriticalCVE-2026-94075

    WordPress Newsletters plugin <= 4.18.1 - PHP Object Injection vulnerability

    		9.8
    CriticalCVE-2026-111402

    WordPress Newsletters plugin <= 4.18.1 - SQL Injection vulnerability

    		9.3
    CriticalCVE-2026-116863

    WordPress Newsletters plugin <= 4.18.2 - Cross Site Request Forgery (CSRF) vulnerability

    		9.6
    CriticalCVE-2025-67911

    WordPress Newsletters plugin <= 4.11 - PHP Object Injection vulnerability

    		9.8
    HighCVE-2026-66619

    WordPress Newsletters plugin <= 4.18 - SQL Injection vulnerability

    		7.6
    HighCVE-2026-57645

    WordPress Newsletters plugin <= 4.13 - Broken Access Control vulnerability

    		8.1
    HighCVE-2025-54034

    WordPress Newsletters plugin <= 4.10 - Local File Inclusion vulnerability

    		7.5
    HighCVE-2025-30921

    WordPress Newsletters plugin <= 4.9.9.7 - SQL Injection vulnerability

    		7.6
    HighCVE-2026-54840

    WordPress Newsletters plugin <= 4.13 - Broken Access Control vulnerability

    		7.3
    HighCVE-2026-57394

    WordPress Newsletters plugin <= 4.14 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2025-30858

    WordPress Snow Storm plugin <= 1.4.6 - Reflected Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2024-47346

    WordPress Newsletters plugin <= 4.9.9.1 - Reflected Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2025-69020

    WordPress Newsletters plugin <= 4.12 - Cross Site Scripting (XSS) vulnerability

    		6.5
    HighCVE-2025-24599

    WordPress Newsletters plugin <= 4.9.9.6 - Reflected Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2025-26931

    WordPress Tribulant Gallery Voting plugin <= 1.2.1 - CSRF to Stored XSS vulnerability

    		7.1
    MediumCVE-2024-47376

    WordPress Slideshow Gallery LITE plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability

    		5.9
    MediumCVE-2025-54035

    WordPress Newsletters plugin <= 4.10 - Cross Site Request Forgery (CSRF) Vulnerability

    		4.3

    Products

    Products by Tribulant Software
    Newsletters140