PT-2025-29757 · Tribulant · Tribulant Software Newsletters

Nguyen Xuan Chien · Published 2025-07-16 · Updated 2025-07-16 · CVE-2025-54035

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Tribulant Software Newsletters versions n/a through 4.10

Description A Cross-Site Request Forgery (CSRF) vulnerability exists in Tribulant Software Newsletters, allowing attackers to perform actions on behalf of authenticated users. This issue allows Cross Site Request Forgery.

Recommendations Update Tribulant Software Newsletters to a version later than 4.10.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2025-54035

Affected Products

Tribulant Software Newsletters

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-54035 · Security Note
• https://twitter.com/CVEnew/status/1945435445455974481 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/newsletters-lite/vulnerability/wordpress-newsletters-plugin-4-10-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/newsletters-lite/vulnerability/wordpress-newsletters-plugin-4-10-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note