CVE-2026-16269

The Newsletters WordPress plugin (before 4.16) fails to strictly compare its API authentication key, enabling an unauthenticated bypass of API authentication through type juggling. This allows attackers to perform privileged actions when the optional API is enabled, such as modifying subscriber r...