Known vulnerabilities in Newsletters
Newsletter plugin for WordPress to capture subscribers and send beautiful, bulk newsletter emails.
37Reported vulnerabilities
9.8Highest CVSS score
4.17Latest version
2,000+Active installs
What to do now
Update Newsletters to 4.17 or later.
37 of these have a fixed version available. Updating resolves them.
Reported vulnerabilities
| CVE | Severity | Exploit probability |
Affected versions | Fixed in | Published |
|---|---|---|---|---|---|
| CVE-2019-14788 | High | 3.7% | Before 4.6.19 | 4.6.19 |
August 15, 2019 |
| CVE-2018-20987 | Critical | 2.1% | Before 4.6.8.6 | 4.6.8.6 |
August 22, 2019 |
| CVE-2019-14787 | Medium | 1.0% | Before 4.6.19 | 4.6.19 |
August 9, 2019 |
| CVE-2024-32954 | Critical | 0.6% | 4.9.5 and earlier | 4.9.6 |
April 22, 2024 |
| CVE-2024-8247 | High | 0.5% | Before 4.9.9.3 | 4.9.9.3 |
September 6, 2024 |
| CVE-2026-12583 | High | 0.6% | 4.14 and earlier | 4.15 |
June 23, 2026 |
| CVE-2026-16267 | High | 0.3% | 4.15 and earlier | 4.16 |
August 3, 2026 |
| CVE-2025-67911 | High | 0.4% | 4.11 and earlier | 4.12 |
December 31, 2025 |
| CVE-2025-54034 | High | 0.5% | 4.10 and earlier | 4.11 |
July 29, 2025 |
| CVE-2026-3018 | High | 1.4% | 0 to 4.13 (inclusive) | 4.14 |
June 10, 2026 |
| CVE-2025-4857 | High | 0.8% | Before 4.10 | 4.10 |
May 31, 2025 |
| CVE-2026-16268 | High | 0.4% | 4.15 and earlier | 4.16 |
July 30, 2026 |
| CVE-2026-57394 | High | 0.3% | 4.14 and earlier | 4.15 |
July 8, 2026 |
| CVE-2025-2009 | High | 0.3% | 0 to 4.9.9.7 (inclusive) | 4.9.9.8 |
March 26, 2025 |
| CVE-2025-3107 | Medium | 0.4% | 0 to 4.9.9.8 (inclusive) | 4.9.9.9 |
May 13, 2025 |
| CVE-2024-10181 | Medium | 0.4% | 0 to 4.9.9.4 (inclusive) | 4.9.9.5 |
October 29, 2024 |
| CVE-2026-12939 | Medium | 0.2% | 0 to 4.15 (inclusive) | 4.16 |
July 29, 2026 |
| CVE-2026-12938 | Medium | 0.2% | 0 to 4.15 (inclusive) | 4.16 |
July 29, 2026 |
| CVE-2025-69020 | Medium | 0.2% | 4.12 and earlier | 4.13 |
December 28, 2025 |
| CVE-2024-13739 | Medium | 0.2% | Before 4.9.9.8 | 4.9.9.8 |
March 22, 2025 |
| CVE-2025-24599 | Medium | 0.3% | 4.9.9.6 and earlier | 4.9.9.7 |
December 26, 2024 |
| CVE-2024-47346 | Medium | 0.3% | 4.9.9.1 and earlier | 4.9.9.2 |
September 27, 2024 |
| CVE-2024-43279 | Medium | 0.3% | 4.9.8 and earlier | 4.9.9 |
August 16, 2024 |
| CVE-2024-35718 | Medium | 0.3% | 4.9.5 and earlier | 4.9.6 |
June 6, 2024 |
| CVE-2024-32953 | Medium | 0.7% | 4.9.5 and earlier | 4.9.6 |
April 22, 2024 |
| CVE-2023-30478 | Medium | 0.3% | 4.8.8 and earlier | 4.8.9 |
April 13, 2023 |
| CVE-2026-17520 | Medium | 0.1% | Before 4.17 | 4.17 |
August 27, 2026 |
| CVE-2026-54840 | Medium | 0.3% | 4.13 and earlier | 4.14 |
June 18, 2026 |
| CVE-2024-7411 | Medium | 0.4% | 0 to 4.9.9 (inclusive) 0 to 4.9.9 (inclusive) |
4.9.9.1 |
August 15, 2024 |
| WF-5cba7026-04e4-4ace-9298-0177902b7529 | Medium | — | 4.6.5.2 and earlier | 4.6.5.3 |
May 29, 2017 |
| CVE-2025-30921 | Medium | 0.5% | 4.9.9.7 and earlier | 4.9.9.8 |
March 27, 2025 |
| WF-8e0e6fdd-49d2-404a-83e8-c4884bbe7088 | Medium | — | 4.6.4.2 and earlier | 4.6.4.3 |
May 29, 2017 |
| CVE-2026-17522 | Medium | 0.1% | Before 4.17 | 4.17 |
August 29, 2026 |
| CVE-2026-75908 | Medium | 0.2% | 0 to 4.17 (inclusive) | 4.18 |
August 25, 2026 |
| CVE-2026-57645 | Medium | 0.3% | 4.13 and earlier | 4.14 |
June 26, 2026 |
| CVE-2025-54035 | Medium | 0.1% | 4.10 and earlier | 4.11 |
July 16, 2025 |
| CVE-2024-37227 | Medium | 0.2% | 4.9.7 and earlier | 4.9.8 |
June 21, 2024 |