Skip to content
OpenAdvisories

Vendor

Stefano Lissa

3 known vulnerabilities.

Products

Newsletter 2 Include Me 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-66596

    WordPress Newsletter plugin <= 9.3.3 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Newsletter <= 9.3.3 versions.

    Stefano Lissa Newsletter
  • High 7.6
    CVE-2025-67999

    WordPress Newsletter plugin <= 9.0.9 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stefano Lissa Newsletter newsletter allows Blind SQL Injection.This issue affects Newsletter: from n/a through <= 9.0.9.

    Stefano Lissa Newsletter