PT-2025-1916

Name of the Vulnerable Software and Affected Versions Newsletter2Go plugin for WordPress versions up to, and including, 4.0.14 Description The issue allows unauthorized modification of data due to a missing capability check on the 'resetStyles' AJAX action. This makes it possible for authenticate...

PT-2024-17946

Name of the Vulnerable Software and Affected Versions Newsletter2Go plugin for WordPress versions up to, and including, 4.0.13 Description The issue is related to Stored Cross-Site Scripting via the style parameter due to insufficient input sanitization and output escaping. This allows...