CRITICAL 9.3 CVE-2026-111402 Published 24 Oct 2026

WordPress Newsletters Plugin SQL Injection Vulnerability

Worried this affects your website?

A vulnerability in Tribulant Software Newsletters (newsletters-lite) allows SQL Injection.

The issue is caused by improper neutralization of special elements used in an SQL command.

  • Affected versions: from n/a through 4.18.1.

Reference: CVE-2026-111402 on NVD

← Back to Security News