What’s Vulnerable › Products

Tribulant Software Newsletters vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.

Check whether your Tribulant Software Newsletters version is affected

Latest Tribulant Software Newsletters vulnerabilities

• CVE-2026-116863 — WordPress Newsletters plugin <= 4.18.2 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 9.6)
• CVE-2026-94075 — WordPress Newsletters plugin <= 4.18.1 - PHP Object Injection vulnerability (CVSS 9.8)
• CVE-2026-111402 — WordPress Newsletters plugin <= 4.18.1 - SQL Injection vulnerability (CVSS 9.3)
• CVE-2026-66619 — WordPress Newsletters plugin <= 4.18 - SQL Injection vulnerability (CVSS 7.6)
• CVE-2026-57394 — WordPress Newsletters plugin <= 4.14 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-57645 — WordPress Newsletters plugin <= 4.13 - Broken Access Control vulnerability (CVSS 8.1)
• CVE-2026-54840 — WordPress Newsletters plugin <= 4.13 - Broken Access Control vulnerability (CVSS 7.3)
• CVE-2025-67911 — WordPress Newsletters plugin <= 4.11 - PHP Object Injection vulnerability (CVSS 9.8)
• CVE-2025-69020 — WordPress Newsletters plugin <= 4.12 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2025-54034 — WordPress Newsletters plugin <= 4.10 - Local File Inclusion vulnerability (CVSS 7.5)
• CVE-2025-54035 — WordPress Newsletters plugin <= 4.10 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 4.3)
• CVE-2025-30921 — WordPress Newsletters plugin <= 4.9.9.7 - SQL Injection vulnerability (CVSS 7.6)
• CVE-2025-24599 — WordPress Newsletters plugin <= 4.9.9.6 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2024-47346 — WordPress Newsletters plugin <= 4.9.9.1 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)