PT-2026-94167

Name of the Vulnerable Software and Affected Versions Newsletter WordPress plugin versions prior to 9.3.8 Description The plugin fails to generate its email tracking signing key with sufficient entropy and utilizes an unkeyed hash to sign tracking links. This allows an unauthenticated attacker wh...

CVE-2026-86823

The Newsletter WordPress plugin before 9.3.7 does not validate the destination of the redirect performed after a public subscription action, allowing unauthenticated attackers to redirect users to arbitrary external sites and to disclose a subscriber token that grants access to that subscriber...

EUVD-2026-80206

The Newsletter WordPress plugin before 9.3.7 does not validate the destination of the redirect performed after a public subscription action, allowing unauthenticated attackers to redirect users to arbitrary external sites and to disclose a subscriber token that grants access to that subscriber...

CVE-2025-3582

The Newsletter WordPress plugin before 8.85 does not sanitise and escape some of its Form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2025-3581

The Newsletter WordPress plugin versions prior to 8.8.5 are vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a lack of validation and escaping of certain Widget options before they are outputted in a page or post where the block is embedded. This flaw allows high-privilege user...

CVE-2022-1889

The Newsletter WordPress plugin before 7.4.6 does not escape and sanitise the preheadertext setting, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when the unfilteredhtml is disallowed...

CVE-2022-1756

The Newsletter WordPress plugin before 7.4.5 does not sanitize and escape the $SERVER'REQUESTURI' before echoing it back in admin pages. Although this uses addslashes, and most modern browsers automatically URLEncode requests, this is still vulnerable to Reflected XSS in older browsers such as...

CVE-2024-3060: Improper Neutralization of Special Elements used in an SQL Command

The ENL Newsletter WordPress plugin through 1.0.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admin+ to perform SQL injection attacks...

CVE-2024-3059: Cross-Site Request Forgery (CSRF)

The ENL Newsletter WordPress plugin through 1.0.1 does not have CSRF checks in some places, which could allow attackers to make logged in admins delete arbitrary Campaigns via a CSRF attack...

PT-2023-16349

Name of the Vulnerable Software and Affected Versions Arigato Autoresponder and Newsletter WordPress plugin versions prior to 2.1.7.2 Description The issue concerns the Arigato Autoresponder and Newsletter WordPress plugin, where certain settings are not properly sanitized and escaped. This could...

PT-2022-14173

Name of the Vulnerable Software and Affected Versions The Newsletter WordPress plugin versions prior to 7.4.6 Description The issue concerns a Stored Cross-Site Scripting attack. High privilege users could exploit this when the unfilteredhtml is disallowed, due to the lack of proper escaping and...

CVE-2022-1756: Improper Neutralization of Input During Web Page Generation

The Newsletter WordPress plugin before 7.4.5 does not sanitize and escape the $SERVER'REQUESTURI' before echoing it back in admin pages. Although this uses addslashes, and most modern browsers automatically URLEncode requests, this is still vulnerable to Reflected XSS in older browsers such as...

PT-2022-14089

Name of the Vulnerable Software and Affected Versions Newsletter WordPress plugin versions prior to 7.4.5 Description The issue concerns a Reflected XSS vulnerability. It occurs because the $ SERVER'REQUEST URI' is not properly sanitized and escaped before being echoed back in admin pages. Althou...