CRITICAL
9.8 CVE-2026-94075 Published 24 Oct 2026
Newsletters WordPress Plugin Deserialization Object Injection Vulnerability
Worried this affects your website?
A vulnerability in Tribulant Software Newsletters (newsletters-lite) allows Deserialization of Untrusted Data, leading to Object Injection.
The issue affects Newsletters versions from n/a through 4.18.1.
Reference: CVE-2026-94075 on NVD
← Back to Security News