Known Vulnerabilities for Newsletters by Tribulant Software
Listed below are 10 of the newest known vulnerabilities associated with "Newsletters" by "Tribulant Software".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-109515 json | The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. plugin for WordPress is vulnerab... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-109221 json | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to arbitrary file deletion d... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-105226 json | A security flaw has been discovered in osCommerce osCommerce2 up to 2.3.4.1. This vulnerability affects the function include ... | Not Provided | 2026-10-05 | 2026-10-07 |
| CVE-2026-104725 json | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in a... | Not Provided | 2026-10-10 | 2026-10-11 |
| CVE-2026-103266 json | Ghost versions 5.2.0 through versions prior to 6.62.0 allow a remote attacker, without authentication, to abuse the Stripe Ch... | Not Provided | 2026-10-01 | 2026-10-06 |
| CVE-2026-97644 json | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation via ... | Not Provided | 2026-10-03 | 2026-10-03 |
| CVE-2026-97074 json | Subscriber Insecure Direct Object References (IDOR) in Newsletters, Email Marketing, SMS and Popups by Omnisend <= 1.9.0 vers... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-92990 json | The SendPress Newsletters WordPress plugin through 1.26.1.20 protects a logging endpoint with a hardcoded token that is the s... | Not Provided | 2026-10-09 | 2026-10-09 |
| CVE-2026-92989 json | The SendPress Newsletters WordPress plugin through 1.26.1.20 does not check the user's capability on several newsletter-manag... | Not Provided | 2026-10-09 | 2026-10-09 |
| CVE-2026-92975 json | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in a... | Not Provided | 2026-10-10 | 2026-10-11 |