Advisories · Technology

NewsmanApp.

Every CVE that names NewsmanApp among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-115821 CVE record

CVSS 7.2 High

NewsmanApp <= 3.7.29 - Unauthenticated Stored Cross-Site Scripting via 'billing_first_name' and 'billing_last_name' Parameters
- NewsmanApp
- Cross-site scripting (XSS)
Not analysed yet 29 Oct 2026
CVE-2025-60164 CVE record

CVSS 7.1 High

WordPress NewsmanApp plugin <= 2.7.7 - Cross Site Request Forgery (CSRF) vulnerability
- NewsmanApp
- Cross-site request forgery (CSRF)
Not analysed yet 26 Sept 2025
CVE-2024-11767 CVE record

CVSS 6.4 Medium

NewsmanApp <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
- NewsmanApp
- Cross-site scripting (XSS)
Not analysed yet 13 Dec 2024