What’s Vulnerable › Products

neop Postalicious vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your neop Postalicious version is affected

Latest neop Postalicious vulnerabilities

• CVE-2026-1266 — Postalicious <= 3.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings (CVSS 4.4)