Product by Tribulant Software

    Newsletters

    14 known vulnerabilities in Newsletters (Tribulant Software), 0 of them actively exploited (CISA KEV).

    Key figures

    14

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Newsletters (Tribulant Software)
    CriticalCVE-2026-94075

    WordPress Newsletters plugin <= 4.18.1 - PHP Object Injection vulnerability

    		9.8
    CriticalCVE-2026-111402

    WordPress Newsletters plugin <= 4.18.1 - SQL Injection vulnerability

    		9.3
    CriticalCVE-2026-116863

    WordPress Newsletters plugin <= 4.18.2 - Cross Site Request Forgery (CSRF) vulnerability

    		9.6
    CriticalCVE-2025-67911

    WordPress Newsletters plugin <= 4.11 - PHP Object Injection vulnerability

    		9.8
    HighCVE-2026-66619

    WordPress Newsletters plugin <= 4.18 - SQL Injection vulnerability

    		7.6
    HighCVE-2026-57645

    WordPress Newsletters plugin <= 4.13 - Broken Access Control vulnerability

    		8.1
    HighCVE-2025-54034

    WordPress Newsletters plugin <= 4.10 - Local File Inclusion vulnerability

    		7.5
    HighCVE-2025-30921

    WordPress Newsletters plugin <= 4.9.9.7 - SQL Injection vulnerability

    		7.6
    HighCVE-2026-54840

    WordPress Newsletters plugin <= 4.13 - Broken Access Control vulnerability

    		7.3
    HighCVE-2026-57394

    WordPress Newsletters plugin <= 4.14 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2024-47346

    WordPress Newsletters plugin <= 4.9.9.1 - Reflected Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2025-69020

    WordPress Newsletters plugin <= 4.12 - Cross Site Scripting (XSS) vulnerability

    		6.5
    HighCVE-2025-24599

    WordPress Newsletters plugin <= 4.9.9.6 - Reflected Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2025-54035

    WordPress Newsletters plugin <= 4.10 - Cross Site Request Forgery (CSRF) Vulnerability

    		4.3

    All products by Tribulant Software