CVE-2019-14787

MEDIUM 5.4CVE-2019-14787 · Published 09/08/2019 · updated 17/06/2026

In short

CVE-2019-14787 is a MEDIUM (CVSS 5.4) vulnerability affecting newsletters (tribulant).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 63.9% of all vulnerabilities.
Fix: update to 4.6.19 or later.

Package	Affected versions	Patched versions
newsletters tribulant	`< 4.6.19`	`4.6.19`

Description

The Tribulant Newsletters plugin before 4.6.19 for WordPress allows XSS via the wp-admin/admin-ajax.php?action=newsletters_load_new_editor contentarea parameter.

References

wordpress.org/plugins/newsletters-lite · Release Notes
wpvulndb.com/vulnerabilities/9447 · Exploit
pluginvulnerabilities.com/2019/07/01/reflected-cross-site-scripting-xss-vulnerability-in-newsletters · Exploit

More vulnerabilities in newsletters

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

newsletters

tribulant

< 4.6.19

4.6.19

More vulnerabilities in newsletters

See all →