Newsletter plugin

Trends

1
WordPress Newsletter plugin leaks subscriber login cookies via tracking links●The WordPress Newsletter plugin leaks a subscriber's login cookie to anyone holding a tracking link from a sent email, eMmastodon Technology Cybersecurity13 d ago
The Newsletter plugin for WordPress has a vulnerability in versions 9.3.9 and earlier: anyone holding a tracking link from a sent email can obtain a subscriber's login cookie, exposing stored personal data. The flaw is tracked as CVE-2026-92537. The developer has released version 9.4.0, and site administrators are being urged to update immediately.