CVE-2026-86823: CWE-601 URL Redirection to Untrusted Site ('Open Redirect') in Newsletter
The Newsletter WordPress plugin before 9.3.7 does not validate the destination of the redirect performed after a public subscription action, allowing unauthenticated attackers to redirect users to arbitrary external sites and to disclose a subscriber token that grants access to that subscriber record's front-end actions.
AI Analysis
Technical Summary
The Newsletter WordPress plugin before version 9.3.7 does not properly validate the destination URL used in redirects following public subscription actions. This lack of validation enables unauthenticated attackers to craft URLs that redirect users to untrusted external sites. Furthermore, the vulnerability exposes a subscriber token that can be used to access subscriber-specific front-end functionality, potentially leading to unauthorized actions on behalf of the subscriber.
Potential Impact
Attackers can redirect users to malicious external websites, which may be used for phishing or other social engineering attacks. The exposure of subscriber tokens allows attackers to perform front-end actions as the subscriber, potentially compromising subscriber data or functionality. However, there is no indication of remote code execution or server compromise from this vulnerability.
Mitigation Recommendations
Upgrade the Newsletter WordPress plugin to version 9.3.7 or later, where this vulnerability is fixed. Since the affected versions are explicitly prior to 9.3.7, applying this official fix will remediate the issue. No other mitigation steps are indicated.
CVE-2026-86823: CWE-601 URL Redirection to Untrusted Site ('Open Redirect') in Newsletter
Description
The Newsletter WordPress plugin before 9.3.7 does not validate the destination of the redirect performed after a public subscription action, allowing unauthenticated attackers to redirect users to arbitrary external sites and to disclose a subscriber token that grants access to that subscriber record's front-end actions.
Affected software
Newsletter
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Newsletter WordPress plugin before version 9.3.7 does not properly validate the destination URL used in redirects following public subscription actions. This lack of validation enables unauthenticated attackers to craft URLs that redirect users to untrusted external sites. Furthermore, the vulnerability exposes a subscriber token that can be used to access subscriber-specific front-end functionality, potentially leading to unauthorized actions on behalf of the subscriber.
Potential Impact
Attackers can redirect users to malicious external websites, which may be used for phishing or other social engineering attacks. The exposure of subscriber tokens allows attackers to perform front-end actions as the subscriber, potentially compromising subscriber data or functionality. However, there is no indication of remote code execution or server compromise from this vulnerability.
Mitigation Recommendations
Upgrade the Newsletter WordPress plugin to version 9.3.7 or later, where this vulnerability is fixed. Since the affected versions are explicitly prior to 9.3.7, applying this official fix will remediate the issue. No other mitigation steps are indicated.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- WPScan
- Date Reserved
- 2026-09-08T14:20:35.409Z
- State
- PUBLISHED
Threat ID: 6aaa32e455bf5e2cf517fb48
Added to database: 09/16/2026, 06:10:44 UTC
Last enriched: 09/16/2026, 06:18:05 UTC
Last updated: 09/17/2026, 01:32:32 UTC
Views: 10
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.