CVE-2026-111402: WordPress Newsletters plugin <= 4.18.1 - SQL Injection vulnerability
Published Oct 24, 2026
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Software Newsletters newsletters-lite allows SQL Injection.This issue affects Newsletters: from n/a through 4.18.1.
Affected Software
1 affected component
Tribulant Software Newsletters<=4.18.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Tribulant Software Newsletters (WordPress Newsletters)to a version that resolves this vulnerability.Fixed in 4.18.2
Event History
Oct 24, 2026
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
RemedyDescriptionSeverityWeakness