Known vulnerabilities in the Newsletters Lite plugin
23 security advisories have been published for the Newsletters Lite plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Newsletters Lite - Security Vulnerability (CVE-2026-66619) HIGH
- Newsletters Lite - Broken Access Control (CVE-2026-75908) MEDIUM
- Newsletters Lite - Cross-Site Scripting (XSS) (CVE-2026-12939) MEDIUM
- Newsletters Lite - Cross-Site Scripting (XSS) (CVE-2026-12938) MEDIUM
- Newsletters Lite - Cross-Site Scripting (XSS) (CVE-2026-57394) HIGH
- Newsletters Lite - SQL Injection (CVE-2026-3018) HIGH
- Newsletters Lite - PHP Object Injection (CVE-2025-67911) CRITICAL
- Newsletters Lite - Cross-Site Scripting (XSS) (CVE-2025-69020) MEDIUM
- Newsletters Lite - Path Traversal (CVE-2025-54034) HIGH
- Newsletters Lite - Cross-Site Request Forgery (CSRF) (CVE-2025-54035) MEDIUM
- Newsletters Lite - Path Traversal (CVE-2025-4857) HIGH
- Newsletters Lite - SQL Injection (CVE-2025-3107) MEDIUM
- Newsletters Lite - SQL Injection (CVE-2025-30921) HIGH
- Newsletters Lite - Cross-Site Scripting (XSS) (CVE-2025-2009) HIGH
- Newsletters Lite - Cross-Site Scripting (XSS) (CVE-2024-13739) MEDIUM
- Newsletters Lite - Cross-Site Scripting (XSS) (CVE-2025-24599) HIGH
- Newsletters Lite - Cross-Site Scripting (XSS) (CVE-2024-10181) MEDIUM
- Newsletters Lite - Cross-Site Scripting (XSS) (CVE-2024-47346) HIGH
- Newsletters Lite - Privilege Escalation (CVE-2024-8247) HIGH
- Newsletters Lite - Security Vulnerability (CVE-2024-7411) MEDIUM
- Newsletters Lite - PHP Object Injection (CVE-2018-20987) CRITICAL
- Newsletters Lite - Path Traversal (CVE-2019-14788) HIGH
- Newsletters Lite - Cross-Site Scripting (XSS) (CVE-2019-14787) MEDIUM