satollo vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20241
3. 20251
4. 20264

Newest CVEs

• CVE-2026-96566

  Newsletter <= 9.4.0 - Unauthenticated Stored Cross-Site Scripting via 'np1' Custom Field Parameter

  satollo · Newsletter – Send awesome emails from WordPress

  High7.2
• CVE-2026-92537

  Newsletter <= 9.3.9 - Unauthenticated Insufficiently Protected Credentials via '/tnp/l/' Click-Tracking REST Endpoint (Raw Subscriber Token Cookie Disclosure)

  satollo · Newsletter – Send awesome emails from WordPress

  Medium5.3
• CVE-2026-90981

  Newsletter <= 9.3.8 - Reflected Cross-Site Scripting via 'nn' Parameter

  satollo · Newsletter – Send awesome emails from WordPress

  Medium6.1
• CVE-2026-1051

  Newsletter – Send awesome emails from WordPress <= 9.1.0 - Cross-Site Request Forgery to Newsletter Unsubscription

  satollo · Newsletter – Send awesome emails from WordPress

  Medium4.3
• CVE-2024-13900

  Head, Footer and Post Injections <= 3.3.0 - Authenticated (Administrator+) PHP Code Injection in Multisite Environments

  satollo · Head, Footer and Post Injections

  Medium4.1
• CVE-2024-5317

  Newsletter <= 8.3.4 - Unauthenticated Stored Cross-Site Scripting via np1

  satollo · Newsletter – Send awesome emails from WordPress

  Medium6.4
• CVE-2023-4772

  Newsletter <= 7.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  satollo · Newsletter – Send awesome emails from WordPress

  Medium6.4