Description
Unauthenticated Cross Site Scripting (XSS) in Email Subscribers & Newsletters <= 5.9.33 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Icegram | Email Subscribers & Newsletters | ≤ 5.9.33 | — |
High · 7.1
CVE-2026-81290
EUVD-2026-68778GHSA-27vc-g94v-rvq2
WordPress Email Subscribers & Newsletters plugin <= 5.9.33 - Cross Site Scripting (XSS) vulnerability
Published Aug 31, 2026 · Updated Sep 1, 2026 · Assigned by Patchstack