Log in Start free

satollo

Products

ProductCVEsExploitedLatest
Newsletter – Send awesome emails from WordPress6–Oct 2, 2026
Head, Footer and Post Injections1–Feb 21, 2025

Exploited and recent CVEs

  • CVE-2026-96566 High 7.2 Newsletter <= 9.4.0 - Unauthenticated Stored Cross-Site Scripting via 'np1' Custom Field Parameter 0.3%
  • CVE-2026-92537 Medium 5.3 Newsletter <= 9.3.9 - Unauthenticated Insufficiently Protected Credentials via '/tnp/l/' Click-Tracking REST Endpoint (Raw Subscriber Token Cookie Disclosure) 0.3%
  • CVE-2026-90981 Medium 6.1 Newsletter <= 9.3.8 - Reflected Cross-Site Scripting via 'nn' Parameter 0.4%
  • CVE-2026-1051 Medium 4.3 Newsletter – Send awesome emails from WordPress <= 9.1.0 - Cross-Site Request Forgery to Newsletter Unsubscription 0.1%
  • CVE-2024-13900 Medium 4.1 Head, Footer and Post Injections <= 3.3.0 - Authenticated (Administrator+) PHP Code Injection in Multisite Environments 0.4%
  • CVE-2024-5317 Medium 6.4 Newsletter <= 8.3.4 - Unauthenticated Stored Cross-Site Scripting via np1 0.3%
  • CVE-2023-4772 Medium 6.4 Newsletter <= 7.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.5%