Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Newsletter — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in Newsletter, with AI-generated Chinese analysis, references, and POCs.

Vendor: Stefano Lissa & The Newsletter Team

CVE ID Title CVSS Severity Published
CVE-2026-86824 Newsletter < 9.3.8 - Unauthenticated Subscriber PII Disclosure and Modification via Predictable Tracking Signature Key - - 2026-09-17
CVE-2026-86823 Newsletter < 9.3.7 - Unauthenticated Open Redirect and Subscriber Token Disclosure via ncu Parameter - - 2026-09-16
CVE-2026-66596 WordPress Newsletter plugin <= 9.3.3 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-08-19
CVE-2025-67999 WordPress Newsletter plugin <= 9.0.9 - SQL Injection vulnerability CWE-89 7.6 High 2025-12-16
CVE-2025-3582 Newsletter < 8.8.5 - Admin+ Stored XSS via Form 4.8AI Medium AI 2025-06-09
CVE-2025-3581 Newsletter < 8.8.5 - Admin+ Stored XSS via Widget 4.8AI Medium AI 2025-06-09
CVE-2025-3584 Newsletter < 8.8.2 - Admin+ Stored XSS via Subscription 4.8AI Medium AI 2025-06-03
CVE-2025-3583 Newsletter < 8.7.1 - Admin+ Stored XSS 4.8AI Medium AI 2025-05-05
CVE-2024-30522 WordPress Newsletter plugin <= 8.2.0 - IP Blacklist Bypass vulnerability CWE-290 5.3 Medium 2024-05-17
CVE-2024-31434 WordPress Newsletter plugin <= 8.0.6 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 5.4 Medium 2024-04-15
CVE-2023-27922 WordPress plugin Newsletter 跨站脚本漏洞 6.1 - 2023-05-23

All 11 known CVE vulnerabilities affecting Newsletter with full Chinese analysis, references, and POCs where available.