https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T08:12:35.996236+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-351235 EUVD-2026-351235 2026-10-08T08:12:35.998059+00:00 EUVD-2026-351235 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16269 fkie_cve-2026-16269 2026-10-08T08:12:35.998091+00:00

The Newsletters WordPress plugin before 4.16 does not strictly compare its API authentication key, allowing unauthenticated attackers to bypass the API authentication via type juggling and perform privileged actions such as modifying subscriber records and sending emails, when the optional API has been enabled.

 https://cve.radiocsirt.org/vuln/ghsa-5mfh-c59g-8688 GHSA-5mfh-c59g-8688 2026-10-08T08:12:35.998122+00:00

The Newsletters WordPress plugin before 4.16 does not strictly compare its API authentication key, allowing unauthenticated attackers to bypass the API authentication via type juggling and perform privileged actions such as modifying subscriber records and sending emails, when the optional API has been enabled.