Skip to content
OpenAdvisories
High · 8.5 CVE-2026-124265 EUVD-2026-125426GHSA-fjf9-xjgq-4jj9

WordPress Newsletters plugin <= 4.18.1 - SQL Injection vulnerability

Published Nov 13, 2026 · Updated Nov 13, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Software Newsletters newsletters-lite allows Blind SQL Injection.This issue affects Newsletters: from n/a through 4.18.1.

Affected products

VendorProductAffectedFixed
Tribulant Software Newsletters ≤ 4.18.1 —

References