agentprime: contrid-newslettersEvery new CVE for contrid-newsletters.https://agentprime.io/CVE-2026-101325: Newsletters <= 4.18.1 - Authenticated (Subscriber+) SQL Injection via 'id' Parameterhttps://agentprime.io/advisories/CVE-2026-101325/https://agentprime.io/advisories/CVE-2026-101325/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 31 Oct 2026 08:30:47 GMTCVECVE-2026-75908: Newsletters <= 4.17 - Missing Authorization to Authenticated (Author+) Arbitrary Modification via 'newsletters_mailinglistsroles' POST Parameterhttps://agentprime.io/advisories/CVE-2026-75908/https://agentprime.io/advisories/CVE-2026-75908/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 11:27:10 GMTCVECVE-2026-12939: Newsletters <= 4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Shortcode Attributehttps://agentprime.io/advisories/CVE-2026-12939/https://agentprime.io/advisories/CVE-2026-12939/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 01:29:41 GMTCVECVE-2026-12938: Newsletters <= 4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'target' Shortcode Attributehttps://agentprime.io/advisories/CVE-2026-12938/https://agentprime.io/advisories/CVE-2026-12938/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 01:29:40 GMTCVECVE-2026-3018: Newsletters <= 4.13 - Unauthenticated SQL Injection via wpmlsubscriber_id Parameterhttps://agentprime.io/advisories/CVE-2026-3018/https://agentprime.io/advisories/CVE-2026-3018/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jun 2026 08:28:20 GMTCVECVE-2025-4857: Newsletters <= 4.9.9.9 - Authenticated (Administrator+) Local File Inclusionhttps://agentprime.io/advisories/CVE-2025-4857/https://agentprime.io/advisories/CVE-2025-4857/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 31 May 2025 11:18:54 GMTCVECVE-2025-3107: Newsletters <= 4.9.9.8 - Authenticated (Contributor+) SQL Injection orderby Parameterhttps://agentprime.io/advisories/CVE-2025-3107/https://agentprime.io/advisories/CVE-2025-3107/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 May 2025 06:40:55 GMTCVECVE-2025-2009: Newsletters <= 4.9.9.7 - Unauthenticated Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2025-2009/https://agentprime.io/advisories/CVE-2025-2009/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Mar 2025 08:21:50 GMTCVECVE-2024-13739: Newsletters <= 4.9.9.7 - Reflected Cross-Site Scripting via To Parameterhttps://agentprime.io/advisories/CVE-2024-13739/https://agentprime.io/advisories/CVE-2024-13739/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 22 Mar 2025 04:22:05 GMTCVECVE-2024-10181: Newsletters <= 4.9.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via newsletters_video Shortcodehttps://agentprime.io/advisories/CVE-2024-10181/https://agentprime.io/advisories/CVE-2024-10181/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Oct 2024 11:32:51 GMTCVECVE-2024-8247: Newsletters <= 4.9.9.2 - Authenticated Privilege Escalationhttps://agentprime.io/advisories/CVE-2024-8247/https://agentprime.io/advisories/CVE-2024-8247/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Sep 2024 03:30:40 GMTCVECVE-2024-7411: Newsletters <= 4.9.9 - Unauthenticated Full Path Disclosurehttps://agentprime.io/advisories/CVE-2024-7411/https://agentprime.io/advisories/CVE-2024-7411/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Aug 2024 07:32:36 GMTCVE