Newsletter – Send awesome emails from WordPress

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Newsletter – Send awesome emails from WordPress

Information

Software Type Plugin
Software Slug newsletter (view on wordpress.org)
Software Status Active
Software Author satollo
Software Website www.thenewsletterplugin.com
Software Downloads 24,998,771
Software Active Installs 300,000
Software Record Last Updated April 20, 2024

13 Vulnerabilities

Newsletter <= 8.0.6 - Cross-Site Request Forgery
4.3
CVE-2024-31434
Apr 10, 2024
Researcher: Dhabaleshwar Das
Newsletter <= 8.2.0 - IP Spoofing
5.3
CVE-2024-30522
Mar 28, 2024
Researcher: Mika
Newsletter <= 8.0.6 - Cross-Site Request Forgery
4.7
CVE ID Unknown
Jan 10, 2024
Researchers:
Newsletter <= 7.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
CVE-2023-4772
Aug 17, 2023
Researcher: István Márton
Newsletter <= 7.6.8 - Reflected Cross-Site Scripting
4.7
CVE-2023-27922
Mar 27, 2023
Researcher: Gen Sato
Newsletter <= 7.4.5 - Authenticated (Admin+) Stored Cross-Site Scripting
5.5
CVE-2022-1889
May 30, 2022
Researcher: PHYO WIN SHEIN
Newsletter – Send awesome emails from WordPress <= 7.4.4 - Reflected Cross-Site Scripting
6.1
CVE-2022-1756
May 23, 2022
Researcher: PHYO WIN SHEIN
Newsletter <= 6.8.1 - Reflected Cross-Site Scripting
6.5
CVE-2020-35933
Aug 3, 2020
Researcher: Ram
Newsletter <= 6.8.1 - Authenticated PHP Object Injection
7.5
CVE-2020-35932
Aug 2, 2020
Researcher: Ram
Newsletter <= 6.7.6 - Stored Cross-Site Scripting
8.3
CVE ID Unknown
Jul 12, 2020
Researcher: Chevon Phillip
Newsletter <= 6.5.3 - CSV Injection
5.5
CVE ID Unknown
Mar 16, 2020
Researcher: Vishnupriya Ilango
Newsletter <= 3.8.2 - Open Redirect
4.3
CVE ID Unknown
Mar 30, 2015
Researcher: James Hooker
Newsletter <= 3.2.6 - Reflected Cross-Site Scripting
6.1
CVE ID Unknown
May 14, 2013
Researcher: Gjoko Krstic
Title CVE ID CVSS Researchers Date
Newsletter <= 8.0.6 - Cross-Site Request Forgery CVE-2024-31434 4.3 Dhabaleshwar Das April 10, 2024
Newsletter <= 8.2.0 - IP Spoofing CVE-2024-30522 5.3 Mika March 28, 2024
Newsletter <= 8.0.6 - Cross-Site Request Forgery 4.7 January 10, 2024
Newsletter <= 7.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-4772 6.4 István Márton August 17, 2023
Newsletter <= 7.6.8 - Reflected Cross-Site Scripting CVE-2023-27922 4.7 Gen Sato March 27, 2023
Newsletter <= 7.4.5 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2022-1889 5.5 PHYO WIN SHEIN May 30, 2022
Newsletter – Send awesome emails from WordPress <= 7.4.4 - Reflected Cross-Site Scripting CVE-2022-1756 6.1 PHYO WIN SHEIN May 23, 2022
Newsletter <= 6.8.1 - Reflected Cross-Site Scripting CVE-2020-35933 6.5 Ram August 3, 2020
Newsletter <= 6.8.1 - Authenticated PHP Object Injection CVE-2020-35932 7.5 Ram August 2, 2020
Newsletter <= 6.7.6 - Stored Cross-Site Scripting 8.3 Chevon Phillip July 12, 2020
Newsletter <= 6.5.3 - CSV Injection 5.5 Vishnupriya Ilango March 16, 2020
Newsletter <= 3.8.2 - Open Redirect 4.3 James Hooker March 30, 2015
Newsletter <= 3.2.6 - Reflected Cross-Site Scripting 6.1 Gjoko Krstic May 14, 2013

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation