Newsletters
Tribulant Software
Developer
4.18.2
Latest version
2,000
Installations
No date
Last updated
Vulnerability history
1 present
38 patched
16 Mitigation rules
- Authenticated (Subscriber+) SQL Injection vulnerability<= 4.18.12 days ago
- Cross Site Request Forgery (CSRF) vulnerability<= 4.18.26 days ago
- PHP Object Injection vulnerability<= 4.18.122/10/2026
- SQL Injection vulnerability<= 4.18.122/10/2026
- Unauthenticated Subscriber Record Overwrite and PII Disclosure vulnerability< 4.18.124/09/2026
- Unauthenticated API Authentication Bypass via Type Juggling vulnerability< 4.1617/09/2026
- SQL Injection vulnerability<= 4.1817/09/2026
- Unauthenticated API Access vulnerability< 4.1729/08/2026
- Arbitrary Plugin Option Update vulnerability< 4.1729/08/2026
- Unauthenticated Server-Side Request Forgery via SNS Bounce Handler vulnerability< 4.1626/08/2026
- Authenticated (Author+) Arbitrary Modification via 'newsletters_mailinglistsroles' POST Parameter vulnerability<= 4.1725/08/2026
- Unauthenticated PHP Object Injection via Date Form Field vulnerability< 4.1620/08/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 4.1528/07/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 4.1528/07/2026
- Cross Site Scripting (XSS) vulnerability<= 4.1408/07/2026
- Broken Access Control vulnerability<= 4.1326/06/2026
- Broken Access Control vulnerability<= 4.1318/06/2026
- Unauthenticated SQL Injection vulnerability<= 4.1310/06/2026
- PHP Object Injection vulnerability<= 4.1131/12/2025
- Cross Site Scripting (XSS) vulnerability<= 4.1228/12/2025
- Local File Inclusion vulnerability<= 4.1029/07/2025
- Cross Site Request Forgery (CSRF) Vulnerability<= 4.1016/07/2025
- Authenticated (Administrator+) Local File Inclusion vulnerability<= 4.9.9.902/06/2025
- Authenticated (Contributor+) SQL Injection orderby Parameter vulnerability<= 4.9.9.812/05/2025
- SQL Injection vulnerability<= 4.9.9.727/03/2025
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 4.9.9.725/03/2025
- Reflected Cross-Site Scripting via To Parameter vulnerability<= 4.9.9.721/03/2025
- Reflected Cross Site Scripting (XSS) vulnerability<= 4.9.9.626/12/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via newsletters_video Shortcode vulnerability<= 4.9.9.429/10/2024
- Reflected Cross Site Scripting (XSS) vulnerability<= 4.9.9.127/09/2024
- Authenticated Privilege Escalation vulnerability<= 4.9.9.206/09/2024
- Cross Site Scripting (XSS) vulnerability<= 4.9.816/08/2024
- Unauthenticated Full Path Disclosure vulnerability<= 4.9.915/08/2024
- Cross Site Request Forgery (CSRF) vulnerability<= 4.9.721/06/2024
- Reflected Cross Site Scripting (XSS) vulnerability<= 4.9.506/06/2024
- Arbitrary File Upload vulnerability<= 4.9.522/04/2024
- Sensitive Data Exposure vulnerability<= 4.9.522/04/2024
- Cross Site Request Forgery (CSRF) vulnerability<= 4.8.813/04/2023
- Authenticated Reflected Cross-Site Scripting (XSS) vulnerability<= 4.6.1611/07/2019