Newsletters vulnerabilities | LiveThreat CVE Feed

Product

Newsletters

by Tribulant Software · last CVE Oct 27, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 4High 8Medium 2Low 0

Severity

Exploitation

Watch

Add Newsletters to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-94075 New	9.8	0%	Oct 24	WordPress Newsletters plugin <= 4.18.1 - PHP Object Injection vulnerability Affected: through 4.18.1
CVE-2025-67911	9.8	0%	Jan 8	WordPress Newsletters plugin <= 4.11 - PHP Object Injection vulnerability Affected: through 4.11
CVE-2026-116863 New	9.6	0%	Oct 27	WordPress Newsletters plugin <= 4.18.2 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 4.18.2
CVE-2026-111402 New	9.3	0%	Oct 24	WordPress Newsletters plugin <= 4.18.1 - SQL Injection vulnerability Affected: through 4.18.1