Stefano Lissa Newsletter vulnerabilities
2 vulnerabilities
Known vulnerabilities in Stefano Lissa Newsletter, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2025-67999stefano lissa · newsletter +1 moreWordPress Newsletter plugin <= 9.0.9 - SQL Injection vulnerabilityImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stefano Lissa Newsletter newsletter allows Blind SQL Injection.This issue affects Newsletter: from n/a through <= 9.0.9.EPSS0.40%HighCVE-2026-66596stefano lissa · newsletter +1 moreWordPress Newsletter plugin <= 9.3.3 - Cross Site Scripting (XSS) vulnerabilityUnauthenticated Cross Site Scripting (XSS) in Newsletter <= 9.3.3 versions.EPSS0.25%