Vulnerabilities / Newsletter
Newsletter vulnerabilities
Advisories WPSec published for Newsletter – Send awesome emails from WordPress. Other sources may list more. Its attack surface: Newsletter on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-02 | WPSEC-2026-0238 | Newsletter <= 9.4.3 - Unauthenticated Open Redirect via 'redirect' Parameter | Medium 4.7 | 9.4.4 |
| 2026-10-02 | WPSEC-2026-0227 | Newsletter <= 9.3.9 - Unauthenticated Missing Authorization to Subscriber Data Overwrite via Re-Subscription | Medium 5.3 | 9.4.0 |
| 2026-10-02 | WPSEC-2026-0226 | Newsletter <= 9.3.9 - Cross-Site Request Forgery to Subscriber Profile Update | Medium 4.3 | 9.4.0 |
| 2026-10-02 | WPSEC-2026-0225 | Newsletter <= 9.3.9 - Unauthenticated Authentication Bypass via Predictable Subscriber Token | Medium 4.8 | 9.4.0 |
License: CC BY 4.0