Stefano Lissa
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Newsletter | 2 | – | Aug 19, 2026 |
| Include Me | 1 | – | Sep 9, 2025 |
Exploited and recent CVEs
- CVE-2026-66596 WordPress Newsletter plugin <= 9.3.3 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2025-67999 WordPress Newsletter plugin <= 9.0.9 - SQL Injection vulnerability 0.4%
- CVE-2025-58983 WordPress Include Me Plugin <= 1.3.2 - Cross Site Scripting (XSS) Vulnerability 0.2%