Skip to content
Unknown Newsletter vulnerabilities
-
brewlabs sendpress newsletters
SendPress Newsletters <= 1.26.1.20 - Unauthenticated SQL Injection via 'subscriberid' Parameter
CVE-2026-93855
7.5 High
-
unknown sendpress newsletters
SendPress <= 1.26.1.20 - Unauthenticated Newsletter Sending Log Disclosure via Hardcoded Token
CVE-2026-92990
5.3 Medium
-
unknown sendpress newsletters
SendPress Newsletters <= 1.26.1.20 - Subscriber+ Mailing List Sync and Newsletter Queueing
CVE-2026-92989
4.3 Medium
-
brewlabs sendpress newsletters
WordPress SendPress Newsletters plugin <= 1.26.1.20 - SQL Injection vulnerability
CVE-2026-39795
9.3 Critical
-
icegram email subscribers & newsletters
Email Subscribers by Icegram Express < 5.9.35 - Unauthenticated Subscription Status Change via Missing Token Verification
CVE-2026-83555
5.3 Medium
-
tribulant software newsletters
Newsletters < 4.18.1 - Unauthenticated Subscriber Record Overwrite and PII Disclosure via IDOR
CVE-2026-16264
6.5 Medium
-
stefano lissa newsletter
Newsletter < 9.3.8 - Unauthenticated Subscriber PII Disclosure and Modification via Predictable Tracking Signature Key
CVE-2026-86824
4.8 Medium
-
stefano lissa newsletter
Newsletter < 9.3.7 - Unauthenticated Open Redirect and Subscriber Token Disclosure via ncu Parameter
CVE-2026-86823
5.3 Medium
-
trainingbusinesspros groundhogg — crm, newsletters, and marketing automation
Groundhogg < 4.7.2 - Open Redirect via 'redirect_to' Parameter
CVE-2026-81741
4.7 Medium
-
trainingbusinesspros groundhogg — crm, newsletters, and marketing automation
Groundhogg < 4.5.13 - Unauthenticated Stored XSS via Web Form Dropdown/Radio Field
CVE-2026-81660
8.8 High
-
tribulant software newsletters
Newsletters < 4.17 - Arbitrary Plugin Option Update via CSRF
CVE-2026-17522
5.4 Medium
-
tribulant software newsletters
Newsletters < 4.17 - Unauthenticated API Access via Predictable API Key
CVE-2026-17520
4.8 Medium
-
unknown simple newsletter plugin
Noptin < 4.3.3 - Unauthenticated Subscriber PII and confirm_key Disclosure via Actions Page
CVE-2026-78146
6.5 Medium
-
tribulant software newsletters
Newsletters < 4.16 - Unauthenticated API Authentication Bypass via Type Juggling
CVE-2026-16269
4.8 Medium
-
tribulant software newsletters
Newsletters < 4.16 - Unauthenticated PHP Object Injection via Date Form Field
CVE-2026-16267
8.1 High
-
tribulant software newsletters
Newsletters < 4.16 - Unauthenticated Server-Side Request Forgery via SNS Bounce Handler
CVE-2026-16268
8.2 High
-
tribulant software newsletters
Newsletters < 4.15 - Unauthenticated PHP Object Injection via Subscriber Custom Field
CVE-2026-12583
8.1 High
-
unknown wemail: email marketing, email automation, newsletters, subscribers & email optins for woocommerce
weMail < 2.1.3 - Reflected Cross-Site Scripting
CVE-2026-8089
7.1 High
-
stefano lissa newsletter
Newsletter < 8.8.5 - Admin+ Stored XSS via Form
CVE-2025-3582
4.8 Medium
-
stefano lissa newsletter
Newsletter < 8.8.5 - Admin+ Stored XSS via Widget
CVE-2025-3581
4.8 Medium
-
stefano lissa newsletter
Newsletter < 8.8.2 - Admin+ Stored XSS via Subscription
CVE-2025-3584
4.8 Medium
-
stefano lissa newsletter
Newsletter < 8.7.1 - Admin+ Stored XSS
CVE-2025-3583
4.8 Medium
-
megamindstechnologies wordpress email newsletter
WP Email Newsletter <= 1.1 - Reflected XSS
CVE-2024-13098
5.4 Medium
-
alphabpo easy newsletter signups
WordPress Easy Newsletter Signups plugin <= 1.0.4 - Broken Access Control vulnerability
CVE-2023-41664
6.5 Medium
-
unknown recover woocommerce cart abandonment, newsletter, email marketing, marketing automation by funnelkit, funnelkit automations +1 more
Automation By Autonami < 3.3.0 - Unauthenticated SQLi
CVE-2024-9186
8.6 High
-
5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more
Freemius SDK <= 2.4.2 - Missing Authorization Checks
CVE-2022-4974
6.3 Medium
-
pressified sendpress, sendpress newsletters, unknown sendpress newsletters +2 more
WordPress SendPress Newsletters plugin <= 1.23.11.6 - Broken Access Control vulnerability
CVE-2023-35040
5.3 Medium
-
mndpsingh287 newsletter popup
Newsletter Popup <= 1.2 - Admin+ Stored XSS
CVE-2024-3644
4.8 Medium
-
mndpsingh287 newsletter popup, newsletter popup project popup +1 more
Newsletter Popup <= 1.2 - List Deletion via CSRF
CVE-2024-3643
8.8 High
-
mndpsingh287 newsletter popup
Newsletter Popup <= 1.2 - Subscriber Deletion via CSRF
CVE-2024-3642
6.9 Medium
-
mndpsingh287 newsletter popup
Newsletter Popup <= 1.2 - Unauthenticated Stored XSS
CVE-2024-3641
6.1 Medium
-
unknown enl newsletter, enl newsletter plugin project enl-newsletter +1 more
ENL Newsletter <= 1.0.1 - Admin+ SQL Injection
CVE-2024-3060
4.5 Medium
-
unknown enl newsletter, enl newsletter plugin project enl-newsletter +1 more
ENL Newsletter <= 1.0.1 - Campaign Deletion via CSRF
CVE-2024-3059
5.7 Medium
-
unknown enl newsletter, enl newsletter plugin project enl-newsletter +1 more
ENL Newsletter <= 1.0.1 - Stored XSS via CSRF
CVE-2024-3058
5.4 Medium
-
pressified sendpress, unknown sendpress newsletters +1 more
SendPress Newsletters <= 1.23.11.6 - Admin+ Stored XSS via Form Settings
CVE-2024-1589
6.1 Medium
-
pressified sendpress, unknown sendpress newsletters +1 more
SendPress Newsletters <= 1.23.11.6 - Admin+ Stored XSS via Settings
CVE-2024-1588
6.8 Medium
-
tribulant newsletters
Newsletter Lite < 4.9.3 - Admin+ Command Injection
CVE-2023-4797
7.2 High
-
funnelkit recover woocommerce cart abandonment, newsletter, email marketing, marketing automation by funnelkit, automations +1 more
WordPress Automation By Autonami Plugin <= 2.6.1 is vulnerable to SQL Injection
CVE-2023-50857
7.6 High
-
alphabpo easy newsletter signups
Easy Newsletter Signups <= 1.0.4 - Admin+ SQLi
CVE-2023-5108
7.2 High
-
pressified sendpress, sendpress newsletters, unknown sendpress newsletters +2 more
WordPress SendPress Newsletters Plugin <= 1.23.11.6 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-47517
7.1 High
-
brewlabs sendpress newsletters, pressified sendpress +1 more
SendPress Newsletters <= 1.22.3.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-5660
6.4 Medium
-
pressified sendpress, sendpress newsletters, unknown sendpress newsletters +2 more
WordPress SendPress Newsletters Plugin <= 1.22.3.31 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-41730
4.3 Medium
-
pressified sendpress, sendpress newsletters, unknown sendpress newsletters +2 more
WordPress SendPress Newsletters Plugin <= 1.22.3.31 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-41729
5.9 Medium
-
brevo newsletter, smtp, email marketing and subscribe forms by sendinblue, newsletter\, smtp\, email marketing and subscribe +1 more
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.61 - Reflected XSS
CVE-2023-2472
6.1 Medium
-
newsletter popup project popup, unknown newsletter popup +1 more
Newsletter Popup <= 1.2 - Record Deletion via CSRF
CVE-2023-0766
8.8 High
-
newsletter popup project popup, unknown newsletter popup +1 more
Newsletter Popup <= 1.2 - Unauthenticated Stored XSS
CVE-2023-0733
6.1 Medium
-
bob arigato autoresponder and newsletter
Arigato Autoresponder and Newsletter < 2.1.7.2 - Admin+ Stored XSS
CVE-2023-0543
4.8 Medium
-
themehunk wp popup builder, unknown wp popup builder – popup forms , marketing popup & newsletter +1 more
WP Popup Builder < 1.3.0 - Subscriber+ Arbitrary Popup Deletion
CVE-2022-2405
4.3 Medium
-
themehunk wp popup builder, unknown wp popup builder – popup forms , marketing popup & newsletter +1 more
WP Popup Builder < 1.2.9 - Reflected Cross-Site Scripting
CVE-2022-2404
6.1 Medium
-
funnelkit automations, unknown abandoned cart recovery for woocommerce, follow up emails, newsletter builder & marketing automation by autonami +1 more
Automations By Autonami < 2.1.2 - Subscriber+ Automation Creation
CVE-2022-2389
4.3 Medium
- Show olderLoading…