CVE-2026-12939 | Newsletters Lite Plugin up to 4.15 on WordPress Shortcode helpers/shortcode.php post_thumbnail Link cross site scripting (EUVD-2026-50096)

July 29, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Newsletters Lite Plugin up to 4.15 on WordPress. Affected is the function post_thumbnail of the file helpers/shortcode.php of the component Shortcode Handler. The manipulation of the argument Link results in cross site scripting.

This vulnerability is reported as CVE-2026-12939. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More