satollo Newsletter – Send awesome emails from WordPress

• CVE-2026-96566 High 7.2 Newsletter <= 9.4.0 - Unauthenticated Stored Cross-Site Scripting via 'np1' Custom Field Parameter 0.3%
• CVE-2026-92537 Medium 5.3 Newsletter <= 9.3.9 - Unauthenticated Insufficiently Protected Credentials via '/tnp/l/' Click-Tracking REST Endpoint (Raw Subscriber Token Cookie Disclosure) 0.3%
• CVE-2026-90981 Medium 6.1 Newsletter <= 9.3.8 - Reflected Cross-Site Scripting via 'nn' Parameter 0.4%
• CVE-2026-1051 Medium 4.3 Newsletter – Send awesome emails from WordPress <= 9.1.0 - Cross-Site Request Forgery to Newsletter Unsubscription 0.1%
• CVE-2024-5317 Medium 6.4 Newsletter <= 8.3.4 - Unauthenticated Stored Cross-Site Scripting via np1 0.3%
• CVE-2023-4772 Medium 6.4 Newsletter <= 7.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.5%