Stefano Lissa vulnerabilities
3 vulnerabilities
Known vulnerabilities in Stefano Lissa products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Newsletter2 vulnerabilities
- Include Me1 vulnerabilities
MediumCVE-2025-58983stefano lissa · include me +1 moreWordPress Include Me Plugin <= 1.3.2 - Cross Site Scripting (XSS) VulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stefano Lissa Include Me include-me allows Stored XSS.This issue affects Include Me: from n/a through <= 1.3.2.EPSS0.18%HighCVE-2025-67999stefano lissa · newsletter +1 moreWordPress Newsletter plugin <= 9.0.9 - SQL Injection vulnerabilityImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stefano Lissa Newsletter newsletter allows Blind SQL Injection.This issue affects Newsletter: from n/a through <= 9.0.9.EPSS0.40%HighCVE-2026-66596stefano lissa · newsletter +1 moreWordPress Newsletter plugin <= 9.3.3 - Cross Site Scripting (XSS) vulnerabilityUnauthenticated Cross Site Scripting (XSS) in Newsletter <= 9.3.3 versions.EPSS0.25%