EUVD-2026-66291

The Simple Newsletter Plugin WordPress plugin before 4.3.3 does not verify that the requester is the subscriber named in a public request before rendering that subscriber's stored details, allowing unauthenticated users to disclose a subscriber's personal data along with the key that authorises...

PT-2026-81971

The Simple Newsletter Plugin WordPress plugin before 4.3.3 does not verify that the requester is the subscriber named in a public request before rendering that subscriber's stored details, allowing unauthenticated users to disclose a subscriber's personal data along with the key that authorises...

CVE-2026-78146: Exposure of Sensitive Information to an Unauthorized Actor

The Simple Newsletter Plugin WordPress plugin before 4.3.3 does not verify that the requester is the subscriber named in a public request before rendering that subscriber's stored details, allowing unauthenticated users to disclose a subscriber's personal data along with the key that authorises...

CVE-2022-46803: Improper Neutralization of Formula Elements in a CSV File

Improper Neutralization of Formula Elements in a CSV File vulnerability in Noptin Newsletter Simple Newsletter Plugin – Noptin.This issue affects Simple Newsletter Plugin – Noptin: from n/a through 1.9.5...

PT-2023-15047 · Unknown · Simple Newsletter Plugin – Noptin

Name of the Vulnerable Software and Affected Versions: Simple Newsletter Plugin – Noptin versions 1.9.5 and earlier Description: The issue is related to the improper neutralization of formula elements in a CSV file, which affects the Simple Newsletter Plugin – Noptin. Recommendations: For version...