Vulnerability in Newsletters

CVE-2026-16269

The Newsletters WordPress plugin before 4.16 does not strictly compare its API authentication key, allowing unauthenticated attackers to bypass the API authentication via type juggling and perform privileged actions such as modifying subsc…

Affected products

  • Unknown Newsletters — versions 0

References