CVE-2026-116863
WordPress Newsletters plugin <= 4.18.2 - Cross Site Request Forgery (CSRF) vulnerability
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
The Newsletters plugin for WordPress, developed by Tribulant Software, is affected by this vulnerability. An attacker could trick a logged-in administrator into unknowingly performing actions on the site, such as changing plugin settings, by getting them to visit a malicious web page.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Software Newsletters newsletters-lite allows Cross Site Request Forgery.This issue affects Newsletters: from n/a through 4.18.2.
Affected versions
- newsletters-lite
through 4.18.2