https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T19:08:52.811370+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-55704 cnvd-2022-55704 2026-10-10T19:08:52.814651+00:00 cnvd-2022-55704 https://cve.radiocsirt.org/vuln/euvd-2026-11930 EUVD-2026-11930 2026-10-10T19:08:52.814688+00:00 EUVD-2026-11930 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1756 fkie_cve-2022-1756 2026-10-10T19:08:52.814703+00:00

The Newsletter WordPress plugin before 7.4.5 does not sanitize and escape the $_SERVER['REQUEST_URI'] before echoing it back in admin pages. Although this uses addslashes, and most modern browsers automatically URLEncode requests, this is still vulnerable to Reflected XSS in older browsers such as Internet Explorer 9 or below.

 https://cve.radiocsirt.org/vuln/ghsa-mg6c-vwvq-75r2 GHSA-mg6c-vwvq-75r2 2026-10-10T19:08:52.814734+00:00

The Newsletter WordPress plugin before 7.4.5 does not sanitize and escape the $_SERVER['REQUEST_URI'] before echoing it back in admin pages. Although this uses addslashes, and most modern browsers automatically URLEncode requests, this is still vulnerable to Reflected XSS in older browsers such as Internet Explorer 9 or below.

 https://cve.radiocsirt.org/vuln/gsd-2022-1756 gsd-2022-1756 2026-10-10T19:08:52.814751+00:00 gsd-2022-1756 https://cve.radiocsirt.org/vuln/jvndb-2022-000057 jvndb-2022-000057 2026-10-10T19:08:52.814763+00:00

WordPress Plugin "Newsletter" provided by Stefano Lissa & The Newsletter Team contains a cross-site scripting vulnerability (CWE-79). Gen Sato of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.