Stefano Lissa vulnerabilities

Products

• Newsletter 11
• Include Me 2

Newest

• stefano lissa newsletter Newsletter < 9.3.8 - Unauthenticated Subscriber PII Disclosure and Modification via Predictable Tracking Signature Key CVE-2026-86824 4.8 MediumSeptember 17, 2026
• stefano lissa newsletter Newsletter < 9.3.7 - Unauthenticated Open Redirect and Subscriber Token Disclosure via ncu Parameter CVE-2026-86823 5.3 MediumSeptember 16, 2026
• stefano lissa newsletter WordPress Newsletter plugin <= 9.3.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-66596 7.1 HighAugust 19, 2026
• stefano lissa newsletter WordPress Newsletter plugin <= 9.0.9 - SQL Injection vulnerability CVE-2025-67999 7.6 HighDecember 16, 2025
• stefano lissa include me WordPress Include Me Plugin <= 1.3.2 - Cross Site Scripting (XSS) Vulnerability CVE-2025-58983 5.9 MediumSeptember 9, 2025
• stefano lissa newsletter Newsletter < 8.8.5 - Admin+ Stored XSS via Form CVE-2025-3582 4.8 MediumJune 9, 2025
• stefano lissa newsletter Newsletter < 8.8.5 - Admin+ Stored XSS via Widget CVE-2025-3581 4.8 MediumJune 9, 2025
• stefano lissa newsletter Newsletter < 8.8.2 - Admin+ Stored XSS via Subscription CVE-2025-3584 4.8 MediumJune 3, 2025
• stefano lissa newsletter Newsletter < 8.7.1 - Admin+ Stored XSS CVE-2025-3583 4.8 MediumMay 5, 2025
• stefanno lissa newsletter WordPress Newsletter plugin <= 8.2.0 - IP Blacklist Bypass vulnerability CVE-2024-30522 5.3 MediumMay 17, 2024
• stefano lissa newsletter WordPress Newsletter plugin <= 8.0.6 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-31434 5.4 MediumApril 15, 2024
• stefano lissa newsletter Cross-site scripting vulnerability in Newsletter versions prior to 7.6.9 allows a remote... CVE-2023-27922 6.1 MediumMay 23, 2023
• include me project me, stefano lissa include me +1 more Include Me <= 1.2.1 - Authenticated Remote Code Execution (RCE) via LFI log poisoning CVE-2021-24453 8.8 HighJuly 19, 2021