Vulnerabilities / Newsletters
Newsletters vulnerabilities
Advisories WPSec published for Newsletters. Other sources may list more. Its attack surface: Newsletters on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-21 | WPSEC-2026-1338 | Newsletters <= 4.18.1 - Unauthenticated PHP Object Injection via Database Update Notice Dismissal | High 8.1 | 4.18.2 |
| 2026-10-21 | WPSEC-2026-1337 | Newsletters <= 4.18.1 - Unauthenticated SQL Injection via Subscriber Management 'id' Parameter | High 7.5 | 4.18.2 |
License: CC BY 4.0