Login Request a demo
NE
Product
Newsletter
by Stefano Lissa & The Newsletter Team · last CVE May 17, 2024
3
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 0Medium 3Low 0
Severity
All severities3Critical0High0Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Newsletter to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-27922
6.1
1%
May 23
Cross-site scripting vulnerability in Newsletter versions prior to 7.6.9 allows a remote unauthenticated attacker to inject an arbitrary script
Affected: versions prior to 7.6.9
CVE-2024-31434
5.4
0%
Apr 15
WordPress Newsletter plugin <= 8.0.6 - Cross Site Request Forgery (CSRF) vulnerability
Affected: through 8.0.6
CVE-2024-30522
5.3
0%
May 17
WordPress Newsletter plugin <= 8.2.0 - IP Blacklist Bypass vulnerability
Affected: through 8.2.0
Showing 3