TH
Vendor
Thenewsletterplugin
10
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-3582 | NE Newsletter Thenewsletterplugin | 4.8 | Jun 9 | Newsletter < 8.8.5 - Admin+ Stored XSS via Form |
| CVE-2025-3581 | NE Newsletter Thenewsletterplugin | 4.8 | Jun 9 | Newsletter < 8.8.5 - Admin+ Stored XSS via Widget |
| CVE-2025-3584 | NE Newsletter Thenewsletterplugin | 4.8 | Jun 3 | Newsletter < 8.8.2 - Admin+ Stored XSS via Subscription |
| CVE-2025-3583 | NE Newsletter Thenewsletterplugin | 4.8 | May 5 | Newsletter < 8.7.1 - Admin+ Stored XSS |
| CVE-2024-5317 | NE Newsletter Thenewsletterplugin | 6.1 | Jun 5 | Newsletter <= 8.3.4 - Unauthenticated Stored Cross-Site Scripting via np1 |
| CVE-2023-4772 | NE Newsletter Thenewsletterplugin | 5.4 | Sep 7 | Newsletter <= 7.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode |
| CVE-2023-27922 | NE Newsletter Thenewsletterplugin | 6.1 | May 23 | Cross-site scripting vulnerability in Newsletter versions prior to 7.6.9 allows a remote unauthenticated attacker to inject an arbitrary script |
| CVE-2022-1889 | NE Newsletter Thenewsletterplugin | 4.8 | Jun 20 | Newsletter < 7.4.6 - Admin+ Stored Cross-Site Scripting |
| CVE-2022-1756 | NE Newsletter Thenewsletterplugin | 6.1 | Jun 13 | Newsletter < 7.4.5 - Reflected Cross-Site Scripting |
| CVE-2020-35933 | NE Newsletter Thenewsletterplugin | 6.5 | Jan 1 | A Reflected Authenticated Cross-Site Scripting (XSS) vulnerability in the Newsletter plugin before 6.8.2 for WordPress allows remote attackers to trick a victim into submitting a… |