7.8.9

DATE	CVE	VULNERABILITY TITLE	RISK
2024-06-05	CVE-2024-5317	Cross-site Scripting vulnerability in Thenewsletterplugin Newsletter The Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'np1' parameter in all versions up to, and including, 8.3.4 due to insufficient input sanitization and output escaping. network low complexity thenewsletterplugin CWE-79	6.1
2023-09-07	CVE-2023-4772	Unspecified vulnerability in Thenewsletterplugin Newsletter The Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'newsletter_form' shortcode in versions up to, and including, 7.8.9 due to insufficient input sanitization and output escaping on user supplied attributes. network low complexity thenewsletterplugin	5.4