Unknown Newsletters

3 known vulnerabilities in Unknown Newsletters, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-16264 CVSS 6.5 medium The Newsletters WordPress plugin before 4.18.1 does not perform an ownership check on some of its subscriber management actions, and…
  • CVE-2026-17522 CVSS 5.4 medium The Newsletters WordPress plugin before 4.17 does not perform any nonce or capability check when saving one of its settings screens, and…
  • CVE-2026-17520 CVSS 4.8 medium The Newsletters WordPress plugin before 4.17 does not generate its API key using a sufficiently random source, deriving it from a publicly…