https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T20:14:36.736688+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-12618 CVE-2024-12618 — Newsletter2Go <= 4.0.14 - Missing Authorization to Authenticated (Subscriber+) Style Reset 2026-10-14T20:14:36.737838+00:00

Affected: Newsletter2Go

The Newsletter2Go plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'resetStyles' AJAX action in all versions up to, and including, 4.0.14. This makes it possible for authenticated attackers, with Subscriber-level access and above, to reset styles.