Advisories · Technology

Newsletter.

Every CVE that names Newsletter among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-86824 CVE record

CVSS 4.8 Medium

Newsletter < 9.3.8 - Unauthenticated Subscriber PII Disclosure and Modification via Predictable Tracking Signature Key
- Newsletter
- Weak cryptography or TLS
Not analysed yet 17 Sept 2026
CVE-2026-86823 CVE record

CVSS 5.3 Medium

Newsletter < 9.3.7 - Unauthenticated Open Redirect and Subscriber Token Disclosure via ncu Parameter
- Newsletter
- Open redirect
Not analysed yet 16 Sept 2026
CVE-2025-3582 CVE record

CVSS 4.8 Medium

Newsletter < 8.8.5 - Admin+ Stored XSS via Form
- Newsletter
Not analysed yet 9 Jun 2025
CVE-2025-3581 CVE record

CVSS 4.8 Medium

Newsletter < 8.8.5 - Admin+ Stored XSS via Widget
- Newsletter
Not analysed yet 9 Jun 2025
CVE-2025-3584 CVE record

CVSS 4.8 Medium

Newsletter < 8.8.2 - Admin+ Stored XSS via Subscription
- Newsletter
Not analysed yet 3 Jun 2025
CVE-2025-3583 CVE record

CVSS 3.5 Low

Newsletter < 8.7.1 - Admin+ Stored XSS
- Newsletter
Not analysed yet 5 May 2025
CVE-2024-30522 CVE record

CVSS 5.3 Medium

WordPress Newsletter plugin <= 8.2.0 - IP Blacklist Bypass vulnerability
- Newsletter
- Authentication bypass
Not analysed yet 17 May 2024
CVE-2024-31434 CVE record

CVSS 5.4 Medium

WordPress Newsletter plugin <= 8.0.6 - Cross Site Request Forgery (CSRF) vulnerability
- Newsletter
- Cross-site request forgery (CSRF)
Not analysed yet 15 Apr 2024
CVE-2023-27922 CVE record

Newsletter: Cross-site scripting vulnerability in Newsletter versions prior to 7.6.9 allows a remote…
- Newsletter
Not analysed yet 23 May 2023