Description
Unauthenticated Broken Access Control in Newsletters <= 4.13 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tribulant Software | Newsletters | ≤ 4.13 | — |
High · 7.3
CVE-2026-54840
EUVD-2026-39682GHSA-7hhw-r4mw-8jm8
WordPress Newsletters plugin <= 4.13 - Broken Access Control vulnerability
Published Jun 26, 2026 · Updated Jun 26, 2026 · Assigned by Patchstack