What’s Vulnerable › Products
satollo Newsletter – Send awesome emails from WordPress vulnerabilities
17 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.
Check whether your satollo Newsletter – Send awesome emails from WordPress version is affected
Latest satollo Newsletter – Send awesome emails from WordPress vulnerabilities
- CVE-2026-96566 — Newsletter <= 9.4.0 - Unauthenticated Stored Cross-Site Scripting via 'np1' Custom Field Parameter (CVSS 7.2)
- CVE-2026-92537 — Newsletter <= 9.3.9 - Unauthenticated Insufficiently Protected Credentials via '/tnp/l/' Click-Tracking REST Endpoint (Raw Subscriber Token Cookie Disclosure) (CVSS 5.3)
- CVE-2026-90981 — Newsletter <= 9.3.8 - Reflected Cross-Site Scripting via 'nn' Parameter (CVSS 6.1)
- CVE-2026-86824 — Newsletter < 9.3.8 - Unauthenticated Subscriber PII Disclosure and Modification via Predictable Tracking Signature Key (CVSS 4.8)
- CVE-2026-86823 — Newsletter < 9.3.7 - Unauthenticated Open Redirect and Subscriber Token Disclosure via ncu Parameter (CVSS 5.3)
- CVE-2026-1051 — Newsletter – Send awesome emails from WordPress <= 9.1.0 - Cross-Site Request Forgery to Newsletter Unsubscription (CVSS 4.3)
- CVE-2025-3582 — Newsletter < 8.8.5 - Admin+ Stored XSS via Form (CVSS 4.8)
- CVE-2025-3581 — Newsletter < 8.8.5 - Admin+ Stored XSS via Widget (CVSS 4.8)
- CVE-2025-3584 — Newsletter < 8.8.2 - Admin+ Stored XSS via Subscription (CVSS 4.8)
- CVE-2025-3583 — Newsletter < 8.7.1 - Admin+ Stored XSS (CVSS 4.8)
- CVE-2024-5317 — Newsletter <= 8.3.4 - Unauthenticated Stored Cross-Site Scripting via np1 (CVSS 6.1)
- CVE-2024-31434 — WordPress Newsletter plugin <= 8.0.6 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4)
- CVE-2023-4772 — Newsletter <= 7.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 5.4)
- CVE-2023-27922 — (CVSS 6.1)
- CVE-2022-1889 — Newsletter < 7.4.6 - Admin+ Stored Cross-Site Scripting (CVSS 4.8)
- CVE-2022-1756 — Newsletter < 7.4.5 - Reflected Cross-Site Scripting (CVSS 6.1)
- CVE-2020-35933 — (CVSS 6.5)