CVE Intelligence

Stefano Lissa vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Stefano Lissa products: 2 record(s), with severity, exploitation and fixes.

Newsletter 2

Exploited only (KEV) →

CVE-2026-66596 High · 7.1 CWE-79 Aug 19, 2026
WordPress Newsletter plugin <= 9.3.3 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Newsletter <= 9.3.3 versions.
CVE-2025-67999 High · 7.6 CWE-89 Dec 16, 2025
WordPress Newsletter plugin <= 9.0.9 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stefano Lissa Newsletter newsletter allows Blind SQL Injection.This issue affects Newsletter: from n/a through <= 9.0.9.