PT-2021-11866

Name of the Vulnerable Software and Affected Versions: Newsletter plugin versions prior to 6.8.2 for WordPress Description: The issue allows authenticated remote attackers with minimal privileges to inject arbitrary PHP objects via the optionsinline edits parameter using the "tpnc render" AJAX...