Newsletters

Güvenlik açıkları

• CVE-2025-67911kimlik doğrulamasız≤ 4.11

  WordPress Newsletters plugin <= 4.11 - PHP Object Injection vulnerability

  Kritik 9.8

• CVE-2018-20987kimlik doğrulamasız

  The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection.

  Kritik 9.8

• CVE-2024-32954yüksek yetki≤ 4.9.5

  WordPress Newsletters plugin <= 4.9.5 - Arbitrary File Upload vulnerability

  Kritik 9.1

• CVE-2024-37227kimlik doğrulamasız · tıklama gerekir≤ 4.9.7

  WordPress Newsletters plugin <= 4.9.7 - Cross Site Request Forgery (CSRF) vulnerability

  Yüksek 8.8

• CVE-2023-30478kimlik doğrulamasız · tıklama gerekir≤ 4.8.8

  WordPress Newsletters Plugin <= 4.8.8 is vulnerable to Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2024-8247abone+≤ 4.9.9.2

  Newsletters <= 4.9.9.2 - Authenticated Privilege Escalation

  Yüksek 8.8

• CVE-2019-14788giriş gerekir

  wp-admin/admin-ajax.php?action=newsletters_exportmultiple in the Tribulant Newsletters plugin before 4.6.19 for WordPress allows directory t

  Yüksek 8.8

• CVE-2026-57645kimlik doğrulamasız · tıklama gerekir≤ 4.13

  WordPress Newsletters plugin <= 4.13 - Broken Access Control vulnerability

  Yüksek 8.1

• CVE-2026-66619yönetici≤ 4.18

  WordPress Newsletters plugin <= 4.18 - SQL Injection vulnerability

  Yüksek 7.6

• CVE-2025-30921yüksek yetki≤ 4.9.9.7

  WordPress Newsletters plugin <= 4.9.9.7 - SQL Injection vulnerability

  Yüksek 7.6

• CVE-2026-3018kimlik doğrulamasız≤ 4.13

  Newsletters <= 4.13 - Unauthenticated SQL Injection via wpmlsubscriber_id Parameter

  Yüksek 7.5

• CVE-2025-54034kimlik doğrulamasız · tıklama gerekir≤ 4.10

  WordPress Newsletters plugin <= 4.10 - Local File Inclusion vulnerability

  Yüksek 7.5

• CVE-2024-32953kimlik doğrulamasız≤ 4.9.5

  WordPress Newsletters plugin <= 4.9.5 - Sensitive Data Exposure vulnerability

  Yüksek 7.5

• CVE-2026-54840kimlik doğrulamasız≤ 4.13

  WordPress Newsletters plugin <= 4.13 - Broken Access Control vulnerability

  Yüksek 7.3

• CVE-2025-2009kimlik doğrulamasız≤ 4.9.9.7

  Newsletters <= 4.9.9.7 - Unauthenticated Stored Cross-Site Scripting

  Yüksek 7.2

• CVE-2025-4857yönetici≤ 4.9.9.9

  Newsletters <= 4.9.9.9 - Authenticated (Administrator+) Local File Inclusion

  Yüksek 7.2

• CVE-2026-57394kimlik doğrulamasız · tıklama gerekir≤ 4.14

  WordPress Newsletters plugin <= 4.14 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2025-24599kimlik doğrulamasız · tıklama gerekir≤ 4.9.9.6

  WordPress Newsletters plugin <= 4.9.9.6 - Reflected Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2024-47346kimlik doğrulamasız · tıklama gerekir≤ 4.9.9.1

  WordPress Newsletters plugin <= 4.9.9.1 - Reflected Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2024-43279kimlik doğrulamasız · tıklama gerekir≤ 4.9.8

  WordPress Newsletters plugin <= 4.9.8 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2025-69020giriş gerekir≤ 4.12

  WordPress Newsletters plugin <= 4.12 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2025-3107katılımcı+≤ 4.9.9.8

  Newsletters <= 4.9.9.8 - Authenticated (Contributor+) SQL Injection orderby Parameter

  Orta 6.5

• CVE-2026-12939katılımcı+≤ 4.15

  Newsletters <= 4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Shortcode Attribute

  Orta 6.4

• CVE-2026-12938katılımcı+≤ 4.15

  Newsletters <= 4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'target' Shortcode Attribute

  Orta 6.4

• CVE-2024-10181katılımcı+≤ 4.9.9.4

  Newsletters <= 4.9.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via newsletters_video Shortcode

  Orta 6.4

• CVE-2024-13739kimlik doğrulamasız · tıklama gerekir≤ 4.9.9.7

  Newsletters <= 4.9.9.7 - Reflected Cross-Site Scripting via To Parameter

  Orta 6.1

• CVE-2024-35718kimlik doğrulamasız · tıklama gerekir≤ 4.9.5

  WordPress Newsletters plugin <= 4.9.5 - Reflected Cross Site Scripting (XSS) vulnerability

  Orta 6.1

• CVE-2019-14787giriş gerekir

  The Tribulant Newsletters plugin before 4.6.19 for WordPress allows XSS via the wp-admin/admin-ajax.php?action=newsletters_load_new_editor c

  Orta 5.4

• CVE-2024-7411kimlik doğrulamasız≤ 4.9.9

  Newsletters <= 4.9.9 - Unauthenticated Full Path Disclosure

  Orta 5.3

• CVE-2025-54035kimlik doğrulamasız · tıklama gerekir≤ 4.10

  WordPress Newsletters plugin <= 4.10 - Cross Site Request Forgery (CSRF) Vulnerability

  Orta 4.3

• CVE-2026-75908yazar+≤ 4.17

  Newsletters <= 4.17 - Missing Authorization to Authenticated (Author+) Arbitrary Modification via 'newsletters_mailinglistsroles' POST Parameter

  Orta 4.3