Newsletters vulnerabilities | LiveThreat CVE Feed

Product

Newsletters

by Tribulant Software · last CVE Oct 27, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 3High 4Medium 0Low 0

Severity

Exploitation

Watch

Add Newsletters to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-57645	8.1	0%	Jun 26	WordPress Newsletters plugin <= 4.13 - Broken Access Control vulnerability Affected: through 4.13
CVE-2026-66619	7.6	0%	Sep 17	WordPress Newsletters plugin <= 4.18 - SQL Injection vulnerability Affected: through 4.18
CVE-2026-54840	7.3	0%	Jun 26	WordPress Newsletters plugin <= 4.13 - Broken Access Control vulnerability Affected: through 4.13
CVE-2026-57394	7.1	0%	Jul 13	WordPress Newsletters plugin <= 4.14 - Cross Site Scripting (XSS) vulnerability Affected: through 4.14