CVE-2026-96566 | satollo The Newsletter Plugin up to 9.4.0 on WordPress Subscription Endpoint is_email np1 cross site scripting

October 2, 2026 Yanac

A vulnerability was found in satollo The Newsletter Plugin up to 9.4.0 on WordPress. It has been classified as problematic. The impacted element is the function is_email of the component Subscription Endpoint. The manipulation of the argument np1 leads to cross site scripting.

This vulnerability is documented as CVE-2026-96566. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More