Description The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection. References https://wordpress.org/plugins/newsletters-lite/#developers https://wpvulndb.com/vulnerabilities/9627