Login Request a demo
NE
Product
Newsletter
by Thenewsletterplugin · last CVE Jun 9, 2025
10
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 0High 0Medium 10Low 0
Severity
All severities10Critical0High0Medium10Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Newsletter to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-35933
6.5
1%
Jan 1
A Reflected Authenticated Cross-Site Scripting (XSS) vulnerability in the Newsletter plugin before 6.8.2 for WordPress allows remote attackers to trick a victim into submitting a…
Affected: before 6.8.2
CVE-2024-5317
6.1
0%
Jun 5
Newsletter <= 8.3.4 - Unauthenticated Stored Cross-Site Scripting via np1
Affected: before 8.3.5
CVE-2023-27922
6.1
1%
May 23
Cross-site scripting vulnerability in Newsletter versions prior to 7.6.9 allows a remote unauthenticated attacker to inject an arbitrary script
Affected: before 7.6.9
CVE-2022-1756
6.1
2%
Jun 13
Newsletter < 7.4.5 - Reflected Cross-Site Scripting
Affected: before 7.4.5
CVE-2023-4772
5.4
1%
Sep 7
Newsletter <= 7.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Affected: through 7.8.9
CVE-2025-3582
4.8
0%
Jun 9
Newsletter < 8.8.5 - Admin+ Stored XSS via Form
Affected: before 8.8.5
CVE-2025-3581
4.8
0%
Jun 9
Newsletter < 8.8.5 - Admin+ Stored XSS via Widget
Affected: before 8.8.5
CVE-2025-3584
4.8
0%
Jun 3
Newsletter < 8.8.2 - Admin+ Stored XSS via Subscription
Affected: before 8.8.2
CVE-2025-3583
4.8
0%
May 5
Newsletter < 8.7.1 - Admin+ Stored XSS
Affected: before 8.7.1
CVE-2022-1889
4.8
1%
Jun 20
Newsletter < 7.4.6 - Admin+ Stored Cross-Site Scripting
Affected: before 7.4.6
Showing 10