CVE-2026-16264 | Newsletters Plugin up to 4.18.0 on WordPress Subscriber Management authorization

September 23, 2026 Yanac

A vulnerability classified as critical was found in Newsletters Plugin up to 4.18.0 on WordPress. Affected is an unknown function of the component Subscriber Management. Executing a manipulation can lead to authorization bypass.

The identification of this vulnerability is CVE-2026-16264. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More