What is GHSA-5mfh-c59g-8688?

GHSA-5mfh-c59g-8688 is a security advisory published by GitHub Security Advisories with Medium severity. The Newsletters WordPress plugin before 4.16 does not strictly compare its API authentication key...

Which CVE IDs does GHSA-5mfh-c59g-8688 cover?

GHSA-5mfh-c59g-8688 covers the following CVE IDs: CVE-2026-16269. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5mfh-c59g-8688?

GHSA-5mfh-c59g-8688 has a CVSS v3 base score of 4.8, published by GitHub Security Advisories.

GHSA-5mfh-c59g-8688MediumCVSS 4.8

The Newsletters WordPress plugin before 4.16 does not strictly compare its API authentication key...

Vendor

GitHub Security Advisories

Published

August 8, 2026

Last Modified

August 11, 2026

🔗 CVE IDs covered (1)

CVE-2026-16269 →

📋 Description

The Newsletters WordPress plugin before 4.16 does not strictly compare its API authentication key, allowing unauthenticated attackers to bypass the API authentication via type juggling and perform privileged actions such as modifying subscriber records and sending emails, when the optional API has been enabled.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-16269
https://wpscan.com/vulnerability/8b09afba-16a5-4d6c-9e85-84433a3c0d66
https://github.com/advisories/GHSA-5mfh-c59g-8688