Vulnerability index

Browse CVEs

5 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

MEDIUM 6.1 CVE-2024-5317 The Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'np1' parameter in all versions up to, and including, 8.3.4 …

Newsletter 8.3.5+ Fix from $1,6002024-06-05 MEDIUM 5.4 CVE-2023-4772 The Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'newsletter_form' shortcode in versions up to, and including…

Newsletter after 7.8.9 Fix from $1,6002023-09-07 MEDIUM 6.1 CVE-2023-27922 Cross-site scripting vulnerability in Newsletter versions prior to 7.6.9 allows a remote unauthenticated attacker to inject an arbitrary script.

Newsletter 7.6.9+ Fix from $1,6002023-05-23 MEDIUM 6.1 CVE-2022-1756 The Newsletter WordPress plugin before 7.4.5 does not sanitize and escape the $_SERVER['REQUEST_URI'] before echoing it back in admin pages. Although…

Newsletter 7.4.5+ Fix from $1,6002022-06-13 MEDIUM 6.5 CVE-2020-35933 A Reflected Authenticated Cross-Site Scripting (XSS) vulnerability in the Newsletter plugin before 6.8.2 for WordPress allows remote attackers to tri…

Newsletter 6.8.2+ Fix from $1,6002021-01-01