Newsletters vulnerabilities

2 known vulnerabilities in Newsletters from Tribulant. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Newsletters: Improper Privilege Management

  CVE-2024-8247Sep 6, 2024Contrid

  The Newsletters plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.9.9.2. This is due to the plugin not restricting what user meta can be updated as screen options. This makes it possible for authenticated attack

• 7.1 High severity

  Newsletters: Improper Neutralization of Input During Web Page Generation

  CVE-2024-43279Aug 18, 2024Tribulant

  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Tribulant Newsletters allows Reflected XSS.This issue affects Newsletters: from n/a through 4.9.8.