Tribulant Newsletters

The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection.

wp-admin/admin-ajax.php?action=newsletters_exportmultiple in the Tribulant Newsletters plugin before 4.6.19 for WordPress allows directory traversal with resultant remote PHP code execution via the subscribers[1][1] parameter in conjunction with an exportfile=../ value.

Newsletters <= 4.9.9.2 - Authenticated Privilege Escalation

WordPress Newsletters Plugin <= 4.8.8 is vulnerable to Cross Site Request Forgery (CSRF)

WordPress Newsletters plugin <= 4.9.7 - Cross Site Request Forgery (CSRF) vulnerability

Newsletter Lite < 4.9.3 - Admin+ Command Injection

Newsletters <= 4.9.9.9 - Authenticated (Administrator+) Local File Inclusion

WordPress Newsletters plugin <= 4.9.5 - Reflected Cross Site Scripting (XSS) vulnerability

Newsletters <= 4.9.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via newsletters_video Shortcode

Newsletters <= 4.9.9.7 - Reflected Cross-Site Scripting via To Parameter

The Tribulant Newsletters plugin before 4.6.19 for WordPress allows XSS via the wp-admin/admin-ajax.php?action=newsletters_load_new_editor contentarea parameter.