Approved changes feed: RSS · Atom

cpe:2.3:a:tribulant_software:newsletters:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTribulant Software (2b792bea-cbb4-5874-af09-c3604b626b9f)
ProductNewsletters (baa9bec4-6334-539d-a478-0c534e03a000)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-111402 vulnerable 2026-11-03 10:16:11.452150 WordPress Newsletters plugin <= 4.18.1 - SQL Injection vulnerability
CRITICAL (9.3)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Software Newsletters newsletters-lite allows SQL Injection.This issue affects Newsletters: from n/a through 4.18.1.
Published: 2026-10-24T08:00:10.963Z
Updated: 2026-11-13T07:43:59.622Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-94075 vulnerable 2026-11-03 10:15:43.731093 WordPress Newsletters plugin <= 4.18.1 - PHP Object Injection vulnerability
CRITICAL (9.8)
Deserialization of Untrusted Data vulnerability in Tribulant Software Newsletters newsletters-lite allows Object Injection.This issue affects Newsletters: from n/a through 4.18.1.
Published: 2026-10-24T08:00:11.463Z
Updated: 2026-10-24T14:46:59.162Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-116863 vulnerable 2026-11-03 10:15:21.266259 WordPress Newsletters plugin <= 4.18.2 - Cross Site Request Forgery (CSRF) vulnerability
CRITICAL (9.6)
Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Software Newsletters newsletters-lite allows Cross Site Request Forgery.This issue affects Newsletters: from n/a through 4.18.2.
Published: 2026-10-27T15:56:41.312Z
Updated: 2026-10-29T13:47:39.657Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-66619 vulnerable 2026-10-13 12:28:43.514106 WordPress Newsletters plugin <= 4.18 - SQL Injection vulnerability
HIGH (7.6)
Administrator SQL Injection in Newsletters <= 4.18 versions.
Published: 2026-09-17T13:24:47.029Z
Updated: 2026-09-19T02:22:48.512Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-57645 vulnerable 2026-07-29 01:03:15.804530 WordPress Newsletters plugin <= 4.13 - Broken Access Control vulnerability
HIGH (8.1)
newsletters_subscribers Broken Access Control in Newsletters <= 4.13 versions.
Published: 2026-06-26T14:53:18.354Z
Updated: 2026-06-26T17:42:27.162Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-57394 vulnerable 2026-07-29 01:00:29.722056 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-54840 vulnerable 2026-07-29 01:00:28.063801 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-69020 vulnerable 2026-06-08 07:41:22.049427 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-67911 vulnerable 2026-06-08 07:41:20.583042 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54035 vulnerable 2026-06-08 07:33:11.032406 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54034 vulnerable 2026-06-08 07:33:11.032054 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30921 vulnerable 2026-06-08 07:17:02.063210 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24599 vulnerable 2026-06-08 07:12:49.570110 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47346 vulnerable 2026-06-08 06:48:11.818009 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-30478 vulnerable 2026-06-08 06:04:39.626956 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.