Vulnerabilidades de Stefano Lissa
CVEs publicadas que afetam produtos de Stefano Lissa: 2 registro(s), com severidade, exploração e correções.
CVE-2026-66596
Alta · 7.1
CWE-79 19/08/2026
WordPress Newsletter plugin <= 9.3.3 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Newsletter <= 9.3.3 versions.
CVE-2025-67999
Alta · 7.6
CWE-89 16/12/2025
WordPress Newsletter plugin <= 9.0.9 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stefano Lissa Newsletter newsletter allows Blind SQL Injection.This issue affects Newsletter: from n/a through <= 9.0.9.