CRITICAL
9.3 CVE-2026-111402 Published 24 Oct 2026
WordPress Newsletters Plugin SQL Injection Vulnerability
Worried this affects your website?
A vulnerability in Tribulant Software Newsletters (newsletters-lite) allows SQL Injection.
The issue is caused by improper neutralization of special elements used in an SQL command.
- Affected versions: from n/a through 4.18.1.
Reference: CVE-2026-111402 on NVD
← Back to Security News