PRODUCT PROFILE

newsletters-lite

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

中危CVE-2026-16268未授权访问2026/09/30

Newsletters < 4.16 - Unauthenticated SSRF via SNS Bounce Handler

Newsletters WordPress plugin < 4.16 contains a server-side request forgery caused by lack of authentication and validation in bounce-processing requests, letting unauthenticated attackers make arbitrary requests to internal or external hosts.

PoC 已收录newsletters-lite

CVSS—EPSS 0.73%

高危CVE-2026-3018SQL注入2026/06/25

WordPress Newsletters <= 4.13 - Unauthenticated SQL Injection

Newsletters WordPress plugin <= 4.13 contains a time-based SQL injection caused by insufficient escaping of the 'wpmlsubscriber_id' parameter, letting unauthenticated attackers extract sensitive database information.

PoC 已收录newsletters-lite

CVSS—EPSS 1.5%