Skip to content
Satollo vulnerabilities
Newest
-
satollo newsletter – send awesome emails from wordpress
Newsletter <= 9.4.0 - Unauthenticated Stored Cross-Site Scripting via 'np1' Custom Field Parameter
CVE-2026-96566
7.2 High
-
satollo newsletter – send awesome emails from wordpress
Newsletter <= 9.3.9 - Unauthenticated Insufficiently Protected Credentials via '/tnp/l/' Click-Tracking REST Endpoint (Raw Subscriber Token Cookie Disclosure)
CVE-2026-92537
5.3 Medium
-
satollo newsletter – send awesome emails from wordpress
Newsletter <= 9.3.8 - Reflected Cross-Site Scripting via 'nn' Parameter
CVE-2026-90981
6.1 Medium
-
satollo newsletter – send awesome emails from wordpress
Newsletter – Send awesome emails from WordPress <= 9.1.0 - Cross-Site Request Forgery to Newsletter Unsubscription
CVE-2026-1051
4.3 Medium
-
satollo head, footer and post injections, head\, footer\, and post injections +1 more
Head, Footer and Post Injections <= 3.3.0 - Authenticated (Administrator+) PHP Code Injection in Multisite Environments
CVE-2024-13900
4.1 Medium
-
thenewsletterplugin newsletter, newsletter send awesome emails, satollo newsletter – send awesome emails from wordpress +2 more
Newsletter <= 8.3.4 - Unauthenticated Stored Cross-Site Scripting via np1
CVE-2024-5317
Fix available
6.4 Medium
-
thenewsletterplugin newsletter, satollo newsletter – send awesome emails from wordpress +1 more
Newsletter <= 7.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-4772
6.4 Medium
-
thenewsletterplugin newsletter, satollo newsletter – send awesome emails from wordpress +1 more
Newsletter < 7.4.6 - Admin+ Stored Cross-Site Scripting
CVE-2022-1889
4.8 Medium
-
thenewsletterplugin newsletter, satollo newsletter – send awesome emails from wordpress +1 more
Newsletter < 7.4.5 - Reflected Cross-Site Scripting
CVE-2022-1756
6.1 Medium
-
satollo giveaway
Giveaway <= 1.2.2 - Authenticated SQL Injection
CVE-2021-24497
7.2 High