Skip to contentTribulant Newsletters vulnerabilities
- contrid newslettersNewsletters <= 4.9.9.9 - Authenticated (Administrator+) Local File InclusionCVE-2025-48577.2 High
- contrid newslettersNewsletters <= 4.9.9.7 - Reflected Cross-Site Scripting via To ParameterCVE-2024-137396.1 Medium
- contrid newslettersNewsletters <= 4.9.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via newsletters_video ShortcodeCVE-2024-101816.4 Medium
- contrid newslettersNewsletters <= 4.9.9.2 - Authenticated Privilege EscalationCVE-2024-82478.8 High
- tribulant newslettersWordPress Newsletters plugin <= 4.9.8 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-432797.1 High
- contrid newslettersNewsletters <= 4.9.9 - Unauthenticated Full Path DisclosureCVE-2024-74115.3 Medium
- tribulant newslettersWordPress Newsletters plugin <= 4.9.7 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-372274.3 Medium
- tribulant newslettersWordPress Newsletters plugin <= 4.9.5 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-357187.1 High
- tribulant newslettersWordPress Newsletters plugin <= 4.9.5 - Arbitrary File Upload vulnerabilityCVE-2024-329549.1 Critical
- newslettersWordPress Newsletters plugin <= 4.9.5 - Sensitive Data Exposure vulnerabilityCVE-2024-329537.5 High
- tribulant newslettersNewsletter Lite < 4.9.3 - Admin+ Command InjectionCVE-2023-47977.2 High
- tribulant newslettersWordPress Newsletters Plugin <= 4.8.8 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-304785.4 Medium
- tribulant newslettersThe newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection.CVE-2018-209879.8 Critical
- tribulant newsletterswp-admin/admin-ajax.php?action=newsletters_exportmultiple in the Tribulant Newsletters plugin...CVE-2019-147888.8 High
- tribulant newslettersThe Tribulant Newsletters plugin before 4.6.19 for WordPress allows XSS via the wp-admin/admin...CVE-2019-147875.4 Medium