Known Vulnerabilities for Newsletters by Contrid
Listed below are 10 of the newest known vulnerabilities associated with "Newsletters" by "Contrid".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-124265 json | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Software News... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-122063 json | The Newsletters plugin for WordPress is vulnerable to blind SQL Injection via the 'user_email' parameter in all versions up t... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-120531 json | The Subscribe2 – Form, Email Subscribers & Newsletters plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi... | Not Provided | 2026-11-07 | 2026-11-08 |
| CVE-2026-119763 json | changelog.com before commit 7b35e829 contains a missing authorization vulnerability that allows unauthenticated attackers to ... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-119512 json | Deserialization of Untrusted Data vulnerability in Tribulant Software Newsletters newsletters-lite allows Object Injection.Th... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-116863 json | Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Software Newsletters newsletters-lite allows Cross Site Request ... | Not Provided | 2026-10-27 | 2026-10-29 |
| CVE-2026-111402 json | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Software News... | Not Provided | 2026-10-24 | 2026-10-24 |
| CVE-2026-109515 json | The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. plugin for WordPress is vulnerab... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-109221 json | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to arbitrary file deletion d... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-105226 json | A security flaw has been discovered in osCommerce osCommerce2 up to 2.3.4.1. This vulnerability affects the function include ... | Not Provided | 2026-10-05 | 2026-10-07 |