Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 08:18:21 +0000 CVE-2026-92989 — SendPress Newsletters <= 1.26.1.20 - Subscriber+ Mailing List Sync and Newsletter Queueing https://vulnerability.circl.lu/vuln/cve-2026-92989 <p><strong>Affected:</strong> Unknown SendPress Newsletters</p> <p>The SendPress Newsletters WordPress plugin through 1.26.1.20 does not check the user&#39;s capability on several newsletter-management actions, allowing any authenticated subscriber-level user to synchronise all site users into a mailing list and to drive the newsletter send queue.</p> <p><strong>Affected:</strong> Unknown SendPress Newsletters</p> <p>The SendPress Newsletters WordPress plugin through 1.26.1.20 does not check the user&#39;s capability on several newsletter-management actions, allowing any authenticated subscriber-level user to synchronise all site users into a mailing list and to drive the newsletter send queue.</p> https://vulnerability.circl.lu/vuln/cve-2026-92989