Vulnerabilities > Thenewsletterplugin > Newsletter > 7.6.7
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-06-05 | CVE-2024-5317 | Cross-site Scripting vulnerability in Thenewsletterplugin Newsletter The Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'np1' parameter in all versions up to, and including, 8.3.4 due to insufficient input sanitization and output escaping. | 6.1 |
| 2023-09-07 | CVE-2023-4772 | Unspecified vulnerability in Thenewsletterplugin Newsletter The Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'newsletter_form' shortcode in versions up to, and including, 7.8.9 due to insufficient input sanitization and output escaping on user supplied attributes. | 5.4 |
| 2023-05-23 | CVE-2023-27922 | Cross-site Scripting vulnerability in Thenewsletterplugin Newsletter Cross-site scripting vulnerability in Newsletter versions prior to 7.6.9 allows a remote unauthenticated attacker to inject an arbitrary script. | 6.1 |