These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-66619 is a HIGH severity vulnerability in Newsletters plugin versions <= 4.18, allowing administrator SQL injection attacks. Defenders should assess exposure, prioritize remediation, and verify inventory for affected versions.
CVE-2026-57394 is a Reflected Cross-Site Scripting (XSS) vulnerability in the Newsletters plugin for WordPress. The vulnerability affects versions up to and including 4.14. This issue allows attackers to inject malicious scripts into web pages, potentially leading to unauthorized actions or data exposure. The vulnerability has a CVSS score of 7.1, indicating a High severity level. Administrators and users [truncated]
A Deserialization of Untrusted Data vulnerability in Tribulant Software Newsletters newsletters-lite allows Object Injection, affecting versions from n/a through <= 4.11. This critical vulnerability has a CVSS score of 9.8. Defenders should assess exposure and prioritize remediation based on the CVSS score and potential operational impacts. The vulnerability allows for object injection attacks, which coul [truncated]