Skip to contentStefano Lissa Newsletter vulnerabilities
- stefano lissa newsletterNewsletter < 9.3.8 - Unauthenticated Subscriber PII Disclosure and Modification via Predictable Tracking Signature KeyCVE-2026-868244.8 Medium
- stefano lissa newsletterNewsletter < 9.3.7 - Unauthenticated Open Redirect and Subscriber Token Disclosure via ncu ParameterCVE-2026-868235.3 Medium
- stefano lissa newsletterWordPress Newsletter plugin <= 9.3.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-665967.1 High
- stefano lissa newsletterWordPress Newsletter plugin <= 9.0.9 - SQL Injection vulnerabilityCVE-2025-679997.6 High
- stefano lissa newsletterNewsletter < 8.8.5 - Admin+ Stored XSS via FormCVE-2025-35824.8 Medium
- stefano lissa newsletterNewsletter < 8.8.5 - Admin+ Stored XSS via WidgetCVE-2025-35814.8 Medium
- stefano lissa newsletterNewsletter < 8.8.2 - Admin+ Stored XSS via SubscriptionCVE-2025-35844.8 Medium
- stefano lissa newsletterNewsletter < 8.7.1 - Admin+ Stored XSSCVE-2025-35834.8 Medium
- stefanno lissa newsletterWordPress Newsletter plugin <= 8.2.0 - IP Blacklist Bypass vulnerabilityCVE-2024-305225.3 Medium
- stefano lissa newsletterWordPress Newsletter plugin <= 8.0.6 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-314345.4 Medium
- stefano lissa newsletterCross-site scripting vulnerability in Newsletter versions prior to 7.6.9 allows a remote...CVE-2023-279226.1 Medium