Unknown Newsletters

• CVE-2026-16264 Medium 6.5 Newsletters < 4.18.1 - Unauthenticated Subscriber Record Overwrite and PII Disclosure via IDOR 0.3%
• CVE-2026-17522 Medium 5.4 Newsletters < 4.17 - Arbitrary Plugin Option Update via CSRF 0.1%
• CVE-2026-17520 Medium 4.8 Newsletters < 4.17 - Unauthenticated API Access via Predictable API Key 0.2%
• CVE-2026-16269 Medium 4.8 Newsletters < 4.16 - Unauthenticated API Authentication Bypass via Type Juggling 0.4%
• CVE-2026-16267 High 8.1 Newsletters < 4.16 - Unauthenticated PHP Object Injection via Date Form Field 0.5%
• CVE-2026-16268 High 8.2 Newsletters < 4.16 - Unauthenticated Server-Side Request Forgery via SNS Bounce Handler 0.7%
• CVE-2026-12583 High 8.1 Newsletters < 4.15 - Unauthenticated PHP Object Injection via Subscriber Custom Field 2.0%
• CVE-2023-4797 High 7.2 Newsletter Lite < 4.9.3 - Admin+ Command Injection 1.0%