CSRF vulnerability in Newsletters Lite plugin for WordPress

WordPress

What happened

A Cross-Site Request Forgery vulnerability has been discovered in the Newsletters Lite plugin for WordPress.

Are you affected?

The Newsletters Lite plugin for WordPress versions up to 4.18.2 may be affected.

What to do now

1. Upgrade to a version that is not listed as affected.
2. Check for updates from the plugin publisher.
3. Review the official advisory for more details.

Sources

• cve.now/CVE-2026-116863
• cve.now/GHSA-R394-JH8X-RP4V
• CVE-2026-116863
• GHSA-R394-JH8X-RP4V
• https://patchstack.com/database/wordpress/plugin/newsletters-lite/vulnerability/wordpress-newsletters-plugin-4-18-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
• cve.now/GHSA-r394-jh8x-rp4v
• GHSA-r394-jh8x-rp4v
• https://nvd.nist.gov/vuln/detail/CVE-2026-116863

Data sources: cve.now, CISA KEV, GitHub Advisory Database, OSV.

This product uses data from the NVD API but is not endorsed or certified by the NVD.