<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: newsletters</title><description>Every new CVE for newsletters.</description><link>https://agentprime.io/</link><item><title>CVE-2026-16264: Newsletters &lt; 4.18.1 - Unauthenticated Subscriber Record Overwrite and PII Disclosure via IDOR</title><link>https://agentprime.io/advisories/CVE-2026-16264/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16264/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 23 Sep 2026 06:00:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-17522: Newsletters &lt; 4.17 - Arbitrary Plugin Option Update via CSRF</title><link>https://agentprime.io/advisories/CVE-2026-17522/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-17522/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 29 Aug 2026 06:00:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-17520: Newsletters &lt; 4.17 - Unauthenticated API Access via Predictable API Key</title><link>https://agentprime.io/advisories/CVE-2026-17520/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-17520/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 29 Aug 2026 06:00:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16269: Newsletters &lt; 4.16 - Unauthenticated API Authentication Bypass via Type Juggling</title><link>https://agentprime.io/advisories/CVE-2026-16269/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16269/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 08 Aug 2026 06:00:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16267: Newsletters &lt; 4.16 - Unauthenticated PHP Object Injection via Date Form Field</title><link>https://agentprime.io/advisories/CVE-2026-16267/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16267/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 08 Aug 2026 06:00:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16268: Newsletters &lt; 4.16 - Unauthenticated Server-Side Request Forgery via SNS Bounce Handler</title><link>https://agentprime.io/advisories/CVE-2026-16268/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16268/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 06 Aug 2026 06:00:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-12583: Newsletters &lt; 4.15 - Unauthenticated PHP Object Injection via Subscriber Custom Field</title><link>https://agentprime.io/advisories/CVE-2026-12583/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12583/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Jul 2026 06:00:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-32953: WordPress Newsletters plugin &lt;= 4.9.5 - Sensitive Data Exposure vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-32953/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-32953/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 24 Apr 2024 07:36:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4797: Newsletter Lite &lt; 4.9.3 - Admin+ Command Injection</title><link>https://agentprime.io/advisories/CVE-2023-4797/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4797/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 16 Jan 2024 15:56:40 GMT</pubDate><category>CVE</category></item></channel></rss>