Newsletter – Send awesome emails from WordPress

Уязвимости

• CVE-2025-67999высокие права≤ 9.0.9

  WordPress Newsletter plugin <= 9.0.9 - SQL Injection vulnerability

  Высокий 7.6

• CVE-2026-96566без авторизации≤ 9.4.0

  Newsletter <= 9.4.0 - Unauthenticated Stored Cross-Site Scripting via 'np1' Custom Field Parameter

  Высокий 7.2

• CVE-2026-66596без авторизации · нужен клик≤ 9.3.3

  WordPress Newsletter plugin <= 9.3.3 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-90981без авторизации · нужен клик≤ 9.3.8

  Newsletter <= 9.3.8 - Reflected Cross-Site Scripting via 'nn' Parameter

  Средний 6.1

• CVE-2024-5317без авторизации≤ 8.3.4

  Newsletter <= 8.3.4 - Unauthenticated Stored Cross-Site Scripting via np1

  Средний 6.1

• CVE-2023-27922без авторизации · нужен клик

  Cross-site scripting vulnerability in Newsletter versions prior to 7.6.9 allows a remote unauthenticated attacker to inject an arbitrary scr

  Средний 6.1

• CVE-2024-31434без авторизации · нужен клик≤ 8.0.6

  WordPress Newsletter plugin <= 8.0.6 - Cross Site Request Forgery (CSRF) vulnerability

  Средний 5.4

• CVE-2023-4772участник+≤ 7.8.9

  Newsletter <= 7.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  Средний 5.4

• CVE-2026-92537без авторизации≤ 9.3.9

  Newsletter <= 9.3.9 - Unauthenticated Insufficiently Protected Credentials via '/tnp/l/' Click-Tracking REST Endpoint (Raw Subscriber Token Cookie Disclosure)

  Средний 5.3

• CVE-2024-30522без авторизации≤ 8.2.0

  WordPress Newsletter plugin <= 8.2.0 - IP Blacklist Bypass vulnerability

  Средний 5.3

• CVE-2026-1051без авторизации · нужен клик≤ 9.1.0

  Newsletter – Send awesome emails from WordPress <= 9.1.0 - Cross-Site Request Forgery to Newsletter Unsubscription

  Средний 4.3