Products: 2
Vulnerabilities: 6
Known Exploited: 0
0
Critical Level Threats
1
High Level Threats
5
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-101325
Newsletters <= 4.18.1 - Authenticated (Subscriber+) SQL Injection via 'id' Parameter
Last Modified: Nov 02, 2026
Published: Oct 31, 2026
CVE-2026-75908
Newsletters <= 4.17 - Missing Authorization to Authenticated (Author+) Arbitrary Modification via 'newsletters_mailinglistsroles' POST Parameter
Last Modified: Aug 25, 2026
Published: Aug 25, 2026
CVE-2026-12939
Newsletters <= 4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Shortcode Attribute
Last Modified: Jul 29, 2026
Published: Jul 29, 2026
CVE-2026-12938
Newsletters <= 4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'target' Shortcode Attribute
Last Modified: Jul 29, 2026
Published: Jul 29, 2026
CVE-2026-2021
Slideshow Gallery LITE <= 1.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'alwaysauto' Shortcode Attribute
Last Modified: Jun 24, 2026
Published: Jun 18, 2026
Items Per Page
