Read the docs

Tribulant Software

Records17All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

Tribulant Software records in CISA KEV

No Tribulant Software vulnerabilities are listed in CISA KEV.

Records

17 records

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in Tribulant Software Newsletters newsletters-lite allows Object Injection.This issue affects Newsletters: from n/a through 4.18.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00449 Published 2026-10-24 No fix listed CWE-502
Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in Tribulant Software Newsletters newsletters-lite allows Object Injection.This issue affects Newsletters: from n/a through <= 4.11.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00456 Published 2026-01-08 No fix listed CWE-502
TI-2026-80049 CVE-2026-111402 · GHSA-6623-56rc-mrm6

SQL injection in WordPress Newsletters plugin

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Software Newsletters newsletters-lite allows SQL Injection.This issue affects Newsletters: from n/a through…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00349 Published 2026-10-24 No fix listed CWE-89
Priority MEDIUM 42

Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Software Newsletters newsletters-lite allows Cross Site Request Forgery.This issue affects Newsletters: from n/a through 4.18.2.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00177 Published 2026-10-27 No fix listed CWE-352
Priority LOW 36

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Tribulant Software Newsletters newsletters-lite allows PHP Local File Inclusion.This issue affects…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00567 Published 2025-08-20 No fix listed CWE-98
Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Software Newsletters newsletters-lite allows SQL Injection.This issue affects Newsletters: from n/a through…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00534 Published 2025-03-27 No fix listed CWE-89
Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tribulant Software Newsletters newsletters-lite allows Reflected XSS.This issue affects Newsletters: from n/a through…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-07-13 No fix listed CWE-79
Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tribulant Software Newsletters newsletters-lite allows Reflected XSS.This issue affects Newsletters: from n/a through…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00255 Published 2025-02-04 No fix listed CWE-79
Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tribulant Software Newsletters newsletters-lite allows Stored XSS.This issue affects Newsletters: from n/a through <=…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00159 Published 2025-12-30 No fix listed CWE-79
Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tribulant Software Slideshow Gallery slideshow-gallery allows Cross-Site Scripting (XSS).This issue affects Slideshow…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00275 Published 2024-10-05 No fix listed CWE-79
Open these records in search →