Advisories · Technology

nonletter Newsletter subscription optin module.

Every CVE that names nonletter Newsletter subscription optin module among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-48308 CVE record

CVSS 7.1 High

WordPress Newsletter subscription optin module plugin <= 1.2.9 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
- nonletter Newsletter subscription optin module
- Cross-site request forgery (CSRF)
Not analysed yet 28 Aug 2025