Read the docs

Newsletter

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Newsletter records in CISA KEV

No Newsletter vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Newsletter 1 record LOW

Records

1 record

TI-2024-05269 CVE-2024-5674 · GHSA-8xmg-v9fm-xcgv

Newsletter - API v1 and v2 addon for Newsletter <= 2.4.5 - Missing Authorization to Email Subscribers Management

Priority LOW 29

The Newsletter - API v1 and v2 addon plugin for WordPress is vulnerable to unauthorized subscribers management due to PHP type juggling issue on the check_api_key function in all versions up to, and including, 2.4.5.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00317 Published 2024-06-12 No fix listed CWE-862
Open these records in search →