Skip to content
OpenAdvisories

Vendor

Tribulant Software

30 known vulnerabilities.

Products

Newsletters 22 Slideshow Gallery 4 Slideshow Gallery LITE 2 Tribulant Gallery Voting 1 Snow Storm 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.6
    CVE-2026-116863

    WordPress Newsletters plugin <= 4.18.2 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Software Newsletters newsletters-lite allows Cross Site Request Forgery.This issue affects Newsletters: from n/a through 4.18.2.

    Tribulant Software Newsletters
  • Critical 9.8
    CVE-2026-94075

    WordPress Newsletters plugin <= 4.18.1 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Tribulant Software Newsletters newsletters-lite allows Object Injection.This issue affects Newsletters: from n/a through 4.18.1.

    Tribulant Software Newsletters
  • Critical 9.3
    CVE-2026-111402

    WordPress Newsletters plugin <= 4.18.1 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Software Newsletters newsletters-lite allows SQL Injection.This issue affects Newsletters: from n/a through 4.18.1.

    Tribulant Software Newsletters
  • Critical 9.8
    CVE-2025-67911

    WordPress Newsletters plugin <= 4.11 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Tribulant Software Newsletters newsletters-lite allows Object Injection.This issue affects Newsletters: from n/a through <= 4.11.

    Tribulant Software Newsletters
  • Critical 9.1
    CVE-2024-32954

    WordPress Newsletters plugin <= 4.9.5 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Tribulant Newsletters.This issue affects Newsletters: from n/a through 4.9.5.

    Tribulant Software Newsletters