TTribulant Software

Products

Exploited and recent CVEs

• CVE-2026-116863 Critical 9.6 WordPress Newsletters plugin <= 4.18.2 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
• CVE-2026-94075 Critical 9.8 WordPress Newsletters plugin <= 4.18.1 - PHP Object Injection vulnerability 0.4%
• CVE-2026-111402 Critical 9.3 WordPress Newsletters plugin <= 4.18.1 - SQL Injection vulnerability 0.3%
• CVE-2026-66619 High 7.6 WordPress Newsletters plugin <= 4.18 - SQL Injection vulnerability 0.4%
• CVE-2026-57394 High 7.1 WordPress Newsletters plugin <= 4.14 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2026-57645 High 8.1 WordPress Newsletters plugin <= 4.13 - Broken Access Control vulnerability 0.3%
• CVE-2026-54840 High 7.3 WordPress Newsletters plugin <= 4.13 - Broken Access Control vulnerability 0.3%
• CVE-2025-67911 Critical 9.8 WordPress Newsletters plugin <= 4.11 - PHP Object Injection vulnerability 0.5%
• CVE-2025-69020 Medium 6.5 WordPress Newsletters plugin <= 4.12 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-54034 High 7.5 WordPress Newsletters plugin <= 4.10 - Local File Inclusion vulnerability 0.6%
• CVE-2025-54035 Medium 4.3 WordPress Newsletters plugin <= 4.10 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%
• CVE-2025-30858 High 7.1 WordPress Snow Storm plugin <= 1.4.6 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2025-30921 High 7.6 WordPress Newsletters plugin <= 4.9.9.7 - SQL Injection vulnerability 0.5%
• CVE-2025-26931 High 7.1 WordPress Tribulant Gallery Voting plugin <= 1.2.1 - CSRF to Stored XSS vulnerability 0.1%
• CVE-2025-24599 High 7.1 WordPress Newsletters plugin <= 4.9.9.6 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2024-47346 High 7.1 WordPress Newsletters plugin <= 4.9.9.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2024-47376 Medium 5.9 WordPress Slideshow Gallery LITE plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability 0.3%