Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder
Developer API

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Careers
Contact
Book a demo

Get Started

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Log in Start free

Home
Vendors
Tribulant
Newsletters

Tribulant Newsletters Vulnerabilities: CVEs, CISA KEV & Security Advisories

25 CVEs

Tribulant Newsletters Vulnerabilities

CVE security advisories and vulnerability history for Newsletters by Tribulant.

25

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

7.4

Avg CVSS

2019–2026

Last updated July 13, 2026

Overview

Tribulant Newsletters has 25 published CVE records since 2019, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 7.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Tribulant Newsletters, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Tribulant Newsletters's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical3

High16

Medium6

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Tribulant Newsletters's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of Tribulant Newsletters's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every Tribulant Newsletters version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

Fixed in

> 4.9.53 CVEs
> 4.102 CVEs
> 4.132 CVEs
4.112 CVEs
4.142 CVEs
4.6.192 CVEs
4.9.62 CVEs
4.9.9.82 CVEs
> 4.111 CVE
> 4.121 CVE
> 4.141 CVE
> 4.8.81 CVE
> 4.9.71 CVE
> 4.9.81 CVE

Find a version

25 CVEs

Sort

WordPress Newsletters plugin <= 4.14 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57394
Patch
CWE-79
High · CVSS 7.1
EPSS 0.2% (7th pct)2026-07-13
WordPress Newsletters plugin <= 4.13 - Broken Access Control vulnerability
CVE-2026-57645
Patch
CWE-862
High · CVSS 8.1
EPSS 0.2% (8th pct)2026-06-26
WordPress Newsletters plugin <= 4.13 - Broken Access Control vulnerability
CVE-2026-54840
Patch
CWE-862
High · CVSS 7.3
EPSS 0.2% (12th pct)2026-06-26
WordPress Newsletters plugin <= 4.11 - PHP Object Injection vulnerability
CVE-2025-67911
Patch
CWE-502
Critical · CVSS 9.8
EPSS 0.4% (30th pct)2026-01-08
WordPress Newsletters plugin <= 4.12 - Cross Site Scripting (XSS) vulnerability
CVE-2025-69020
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.1% (3th pct)2025-12-30
WordPress Newsletters plugin <= 4.10 - Local File Inclusion vulnerability
CVE-2025-54034
Patch
CWE-98
High · CVSS 7.5
EPSS 0.5% (37th pct)2025-08-20
WordPress Newsletters plugin <= 4.10 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-54035
Patch
CWE-352
Medium · CVSS 4.3
EPSS 0.1% (3th pct)2025-07-16
Newsletters <= 4.9.9.9 - Authenticated (Administrator+) Local File Inclusion
CVE-2025-4857
Patch
CWE-22
High · CVSS 7.2
EPSS 0.7% (48th pct)2025-05-31
WordPress Newsletters plugin <= 4.9.9.7 - SQL Injection vulnerability
CVE-2025-30921
Patch
CWE-89
High · CVSS 7.6
EPSS 0.5% (40th pct)2025-03-27
Newsletters <= 4.9.9.7 - Reflected Cross-Site Scripting via To Parameter
CVE-2024-13739
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.2% (15th pct)2025-03-22
WordPress Newsletters plugin <= 4.9.9.6 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-24599
Patch
CWE-79
High · CVSS 7.1
EPSS 0.2% (16th pct)2025-02-04
Newsletters <= 4.9.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via newsletters_video Shortcode
CVE-2024-10181
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.4% (29th pct)2024-10-29
WordPress Newsletters plugin <= 4.9.9.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-47346
Patch
CWE-79
High · CVSS 7.1
EPSS 0.3% (22th pct)2024-10-06
Newsletters <= 4.9.9.2 - Authenticated Privilege Escalation
CVE-2024-8247
Patch
CWE-269
High · CVSS 8.8
EPSS 0.5% (39th pct)2024-09-06
WordPress Newsletters plugin <= 4.9.8 - Cross Site Scripting (XSS) vulnerability
CVE-2024-43279
Patch
CWE-79
High · CVSS 7.1
EPSS 0.3% (22th pct)2024-08-18
Newsletters <= 4.9.9 - Unauthenticated Full Path Disclosure
CVE-2024-7411
Patch
CWE-200
Medium · CVSS 5.3
EPSS 0.4% (36th pct)2024-08-15
WordPress Newsletters plugin <= 4.9.7 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-37227
Patch
CWE-352
High · CVSS 8.8
EPSS 0.2% (14th pct)2024-06-21
WordPress Newsletters plugin <= 4.9.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-35718
Patch
CWE-79
High · CVSS 7.1
EPSS 0.3% (21th pct)2024-06-08
WordPress Newsletters plugin <= 4.9.5 - Arbitrary File Upload vulnerability
CVE-2024-32954
Patch
CWE-434
Critical · CVSS 9.1
EPSS 0.6% (45th pct)2024-04-24
WordPress Newsletters plugin <= 4.9.5 - Sensitive Data Exposure vulnerability
CVE-2024-32953
Patch
CWE-532
High · CVSS 7.5
EPSS 0.7% (49th pct)2024-04-24
High vulnerability · 2024-01-16
CVE-2023-4797
Public exploit
Patch
High · CVSS 7.2
EPSS 1.0% (58th pct)2024-01-16
WordPress Newsletters Plugin <= 4.8.8 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-30478
Patch
CWE-352
High · CVSS 8.8
EPSS 0.3% (23th pct)2023-11-10
Critical vulnerability · 2019-08-22
CVE-2018-20987
Patch
Critical · CVSS 9.8
EPSS 2.1% (80th pct)2019-08-22
High vulnerability · 2019-08-15
CVE-2019-14788
Patch
High · CVSS 8.8
EPSS 3.7% (89th pct)2019-08-15
Medium vulnerability · 2019-08-09
CVE-2019-14787
Patch
Medium · CVSS 5.4
EPSS 1.0% (60th pct)2019-08-09

Common weakness types

The CWE weakness categories most often found in Tribulant Newsletters CVEs. Follow any weakness for its full explanation.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8 CVEs
CWE-352Cross-Site Request Forgery (CSRF)3 CVEs
CWE-862Missing Authorization2 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type1 CVE
CWE-502Deserialization of Untrusted Data1 CVE
CWE-532Insertion of Sensitive Information into Log File1 CVE
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1 CVE
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVE

Disclosure activity by year

How many Tribulant Newsletters CVEs were published each year.

2019

3

2023

1

2024

10

2025

7

2026

4

Other Tribulant products

Browse vulnerabilities for other products by Tribulant.

slideshow gallery11 CVEs Slideshow Gallery LITE3 CVEs newsletter1 CVEs one click ssl1 CVEs Snow Storm1 CVEs tibulant slideshow gallery1 CVEs Tribulant Gallery Voting1 CVEs

All Tribulant vulnerabilities

Frequently asked questions

Common questions about Tribulant Newsletters vulnerabilities.

How many CVEs does Tribulant Newsletters have?: Tribulant Newsletters has 25 published CVE records since 2019.
How many Tribulant Newsletters CVEs are in CISA KEV?: None of Tribulant Newsletters's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Tribulant Newsletters vulnerabilities?: Yes — 1 of Tribulant Newsletters's CVEs have a known public exploit.
Which versions of Tribulant Newsletters are affected?: 67 distinct Tribulant Newsletters versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Tribulant Newsletters CVEs?: Tribulant Newsletters's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-862 (Missing Authorization), CWE-434 (Unrestricted Upload of File with Dangerous Type).
How many critical Tribulant Newsletters vulnerabilities are there?: Tribulant Newsletters has 3 critical and 16 high-severity CVEs.
What is the average severity of Tribulant Newsletters CVEs?: The average CVSS base score across Tribulant Newsletters's scored CVEs is 7.4.

References

All Tribulant vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Tribulant Newsletters vulnerabilities

Monitor new Tribulant Newsletters vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References

> 4.9.9

1 CVE

> 4.9.9.11 CVE

> 4.9.9.21 CVE

> 4.9.9.61 CVE

> 4.9.9.71 CVE

4.101 CVE

4.121 CVE

4.131 CVE

4.151 CVE

4.6.8.61 CVE

4.8.91 CVE

4.9.31 CVE

4.9.81 CVE

4.9.91 CVE

4.9.9.21 CVE

4.9.9.31 CVE

4.9.9.51 CVE

4.9.9.71 CVE