CVE-2026-92537 | CVSS: 5.3 | 严重级别: MEDIUM
The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Insufficiently Protected Credentials in all versions up to, and including, 9.3.9 The plugin's public click-tracking REST route `/tnp/l/` is registered with `permission_callback => '__return_true'` and, upon receiving a valid keyed-MD5 signature, calls `set_user_cookie()`, which emits a `Set-Cookie: newsletter=<id>-<raw_token>` response header to the requester because the subscriber object loaded via `get_user()` lacks the `_trusted` property, causing `get_user_key()` to return the raw token column value i
参考链接:
• https://plugins.trac.wordpress.org/browser/newsletter/tags/9.3.9/includes/module
• https://plugins.trac.wordpress.org/browser/newsletter/tags/9.3.9/includes/module
• https://plugins.trac.wordpress.org/browser/newsletter/tags/9.3.9/includes/module
📌 数据来源: NVD 官方