Newsletter - API v1 and v2 addon for Newsletter

Newsletter - API v1 and v2 addon for Newsletter has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.5, and the most serious one scores 6.5 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Newsletter - API v1 and v2 addon for Newsletter has a vendor fix available, so running the current release closes it.

All of these findings were reported by Arkadiusz Hydzik.

01234567891011.06.2024Today11.06.20246.5Newsletter - API v1 and v2 addon for Newsletter <= 2.4.5 - Missing Authorization to Email Subscribers Management CVSS 6.5 · 11.06.2024

Strategic Overview

Avg CVSSMedium
6.5/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Newsletter - API v1 and v2 addon for Newsletter vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.5CVE-2024-5674

Newsletter - API v1 and v2 addon for Newsletter <= 2.4.5 - Missing Authorization to Email Subscribers Management

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C