Description
Administrator SQL Injection in Newsletters <= 4.18 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tribulant Software | Newsletters | ≤ 4.18 | — |
High · 7.6
CVE-2026-66619
EUVD-2026-81505GHSA-8qv8-7m3w-7633
WordPress Newsletters plugin <= 4.18 - SQL Injection vulnerability
Published Sep 17, 2026 · Updated Sep 19, 2026 · Assigned by Patchstack