Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

WordPress Newsletter Plugin <= 6.4.0 Stored XSS in 1st Custom Field Params

www.wordfence.com 2026-10-02 查看中文 →

Security Advisory High Newsletter

Affected:

Newsletter <= 6.4.0

Referenced CVEs: CVE-2026-96566 · 7.2

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from www.wordfence.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

W3 Total Cache <= 2.1.8 Unvalidated XSS Vulnerability Advisory 2026-10-03 All in One SEO v8.0.2 Reflected DOM Based XSS Vulnerability Advisory and POC 2026-10-03 WordPress Gutenberg Blocks Plugin Remote Code Execution (RCE) Vulnerability Analysis and PoC 2026-10-02 No External Links v1.0.0 Unauthenticated Stored XSS via Log URL PoC 2026-10-02 MultiVendorX <= 10.1.08 Auth Bypass SQLi with POC 2026-10-02

Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro