Read the docs

newsmanapp

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

newsmanapp records in CISA KEV

No newsmanapp vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-82373 CVE-2026-115821 · GHSA-pgwq-g4vx-xmfv

Stored cross-site scripting in NewsmanApp WordPress plugin

Priority LOW 37

The NewsmanApp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'billing_first_name, billing_last_name' parameter in all versions up to, and including, 3.7.29 due to insufficient input sanitizati…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00302 Published 2026-10-29 No fix listed CWE-79
TI-2024-10911 CVE-2024-11767 · GHSA-5w72-jwxr-3wp7

NewsmanApp <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The NewsmanApp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'newsman_subscribe_widget' shortcode in all versions up to, and including, 2.7.6 due to insufficient input sanitization an…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00354 Published 2024-12-13 No fix listed CWE-79
Open these records in search →