WordPress plugin

Newsletter – Send awesome emails from WordPress security & vulnerabilities

Q: Does Newsletter – Send awesome emails from WordPress have known vulnerabilities?

Yes. VulnCrest Radar lists 24 known vulnerabilities in Newsletter – Send awesome emails from WordPress: 4 high, 20 medium. None are known to affect version null.

Q: How do I check which version of Newsletter – Send awesome emails from WordPress I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

Q: What is the most recent Newsletter – Send awesome emails from WordPress vulnerability?

CVE-2026-96566, published Oct 1, 2026: Newsletter <= 9.4.0 - Unauthenticated Stored Cross-Site Scripting via 'np1' Custom Field Parameter. Severity: High (CVSS 7.2).

Q: Is any Newsletter – Send awesome emails from WordPress vulnerability listed in CISA KEV?

No. None of the known Newsletter – Send awesome emails from WordPress vulnerabilities is currently listed in the CISA KEV catalog.

newsletter— active installsLast vulnerability Oct 1, 2026

No known unpatched vulnerabilities in the latest version

All 24 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin

24Known vulnerabilities

Critical0
High4
Medium20
Low0

Vulnerabilities per year

All Newsletter – Send awesome emails from WordPress vulnerabilities

Newsletter – Send awesome emails from WordPress vulnerabilities
Severity	Vulnerability	CVE	Published
High7.2	Unauthenticated Stored Cross-Site Scripting via 'np1' Custom Field Parameter ≤9.4.0Update to 9.4.1	CVE-2026-96566	Oct 01
High7.2	Unauthenticated Stored Cross-Site Scripting ≤9.3.3Update to 9.3.4	CVE-2026-66596	Aug 19
High7.5	Authenticated PHP Object Injection <6.8.2Update to 6.8.2	CVE-2020-35932	Aug 2, 2020
High8.3	Stored Cross-Site Scripting ≤6.7.6Update to 6.7.7	—	Jul 12, 2020

High7.2
Unauthenticated Stored Cross-Site Scripting via 'np1' Custom Field Parameter
≤9.4.0Update to 9.4.1
CVE-2026-96566Oct 01
High7.2
Unauthenticated Stored Cross-Site Scripting
≤9.3.3Update to 9.3.4
CVE-2026-66596Aug 19
High7.5
Authenticated PHP Object Injection
<6.8.2Update to 6.8.2
CVE-2020-35932Aug 2, 2020
High8.3
Stored Cross-Site Scripting
≤6.7.6Update to 6.7.7
2dce9e9a-a2f3-49a9-a6bc-00328632c654Jul 12, 2020

Newsletter – Send awesome emails from WordPress: common questions

Does Newsletter – Send awesome emails from WordPress have known vulnerabilities?

Yes. VulnCrest Radar lists 24 known vulnerabilities in Newsletter – Send awesome emails from WordPress: 4 high, 20 medium. None are known to affect version null.

How do I check which version of Newsletter – Send awesome emails from WordPress I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Newsletter – Send awesome emails from WordPress vulnerability?

CVE-2026-96566, published Oct 1, 2026: Newsletter <= 9.4.0 - Unauthenticated Stored Cross-Site Scripting via 'np1' Custom Field Parameter. Severity: High (CVSS 7.2).

Is any Newsletter – Send awesome emails from WordPress vulnerability listed in CISA KEV?

No. None of the known Newsletter – Send awesome emails from WordPress vulnerabilities is currently listed in the CISA KEV catalog.