Newsletter – Send awesome emails from WordPress

Information

Software Type Plugin
Software Slug newsletter (view on wordpress.org)
Software Status Active
Software Author satollo
Software Website www.thenewsletterplugin.com
Software Downloads 26,697,935
Software Active Installs 300,000
Software Record Last Updated July 26, 2024

14 Vulnerabilities

4.7
CVE ID Unknown
Jan 10, 2024
Researchers:
8.3
CVE ID Unknown
Jul 12, 2020
Researcher: Chevon Phillip
5.5
CVE ID Unknown
Mar 16, 2020
Researcher: Vishnupriya Ilango
4.3
CVE ID Unknown
Mar 30, 2015
Researcher: James Hooker
6.1
CVE ID Unknown
May 14, 2013
Researcher: Gjoko Krstic
Title Status CVE ID CVSS Researchers Date
Newsletter <= 8.3.4 - Unauthenticated Stored Cross-Site Scripting via np1 Patched CVE-2024-5317 6.4 Arkadiusz Hydzik June 4, 2024
Newsletter <= 8.0.6 - Cross-Site Request Forgery Patched CVE-2024-31434 4.3 Dhabaleshwar Das April 10, 2024
Newsletter <= 8.2.0 - IP Spoofing Patched CVE-2024-30522 5.3 Mika March 28, 2024
Newsletter <= 8.0.6 - Cross-Site Request Forgery Patched 4.7 January 10, 2024
Newsletter <= 7.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Patched CVE-2023-4772 6.4 István Márton August 17, 2023
Newsletter <= 7.6.8 - Reflected Cross-Site Scripting Patched CVE-2023-27922 4.7 Gen Sato March 27, 2023
Newsletter <= 7.4.5 - Authenticated (Admin+) Stored Cross-Site Scripting Patched CVE-2022-1889 5.5 PHYO WIN SHEIN May 30, 2022
Newsletter – Send awesome emails from WordPress <= 7.4.4 - Reflected Cross-Site Scripting Patched CVE-2022-1756 6.1 PHYO WIN SHEIN May 23, 2022
Newsletter <= 6.8.1 - Reflected Cross-Site Scripting Patched CVE-2020-35933 6.5 Ram August 3, 2020
Newsletter <= 6.8.1 - Authenticated PHP Object Injection Patched CVE-2020-35932 7.5 Ram August 2, 2020
Newsletter <= 6.7.6 - Stored Cross-Site Scripting Patched 8.3 Chevon Phillip July 12, 2020
Newsletter <= 6.5.3 - CSV Injection Patched 5.5 Vishnupriya Ilango March 16, 2020
Newsletter <= 3.8.2 - Open Redirect Patched 4.3 James Hooker March 30, 2015
Newsletter <= 3.2.6 - Reflected Cross-Site Scripting Patched 6.1 Gjoko Krstic May 14, 2013

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation