Newsletter Vulnerabilities
15 vulnerabilities related to Newsletter
- PoC2026-08-18CVE-2026-16268: Newsletters < 4.16 - Unauthenticated SSRF via SNS Bounce Handler
- PoC2026-06-17CVE-2026-3018: WordPress Newsletters <= 4.13 - Unauthenticated SQL Injection
- PoC2026-02-27CVE-2022-0439: Email Subscribers & Newsletters <= 5.3.1 - Authenticated SQL Injection
- PoC2026-02-24CVE-2024-13098: WordPress Email Newsletter - Reflected XSS
- PoC2026-01-16wp-newsletter-fpd: WordPress Plugin Newsletter - Full Path Disclosure
- PoC2026-01-08wp-newsletter-log-exposure: WordPress Newsletter - Log File Exposure
- PoC2026-01-08wp-newsletter-fpd: WordPress Plugin Newsletter - Full Path Disclosure
- 2025-09-01CVE-2019-19985: WordPress Plugin Email Subscribers & Newsletters 4.2.2 - Unauthenticated File Download
- PoC2025-08-01CVE-2019-19985: WordPress Email Subscribers & Newsletters <4.2.3 - Arbitrary File Retrieval
- PoC2025-08-01CVE-2022-1756: Newsletter < 7.4.5 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-27922: Newsletter < 7.6.9 - Cross-Site Scripting
- PoC2025-08-01newsletter-open-redirect: WordPress Newsletter Manager < 1.5 - Unauthenticated Open Redirect
- PoC2025-08-01wp-knews-xss: WordPress Knews Multilingual Newsletters 1.1.0 - Cross-Site Scripting
- 2025-05-03（CVE-2025-4172）VerticalResponse Newsletter Widget插件存储型跨站脚本漏洞
- 2022-06-20WordPress插件Email Subscribers & Newsletters信息泄露(CVE-2019-19985)