CVE-2026-111402
WordPress Newsletters plugin <= 4.18.1 - SQL Injection vulnerability
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
The Newsletters plugin for WordPress, developed by Tribulant Software, is affected by this vulnerability. An attacker could exploit it to inject malicious SQL commands, potentially allowing them to read, modify, or delete data in the site's database.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Software Newsletters newsletters-lite allows SQL Injection.This issue affects Newsletters: from n/a through 4.18.1.
Affected versions
- newsletters-lite
through 4.18.1