Security WordPress Newsletter 4.6.0 Cross Site Request Forgery / Cross Site Scripting October 13, 2016 007admin Leave a comment WordPress Newsletter plugin version 4.6.0 suffers from cross site request forgery and cross site scripting vulnerabilities.