CVE-2024-34568

WordPress LetterPress Newsletter plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeqx LetterPress allows Stored XSS.This issue affects LetterPress: from n/a through 1.2.1.

Affected

Themeqx · LetterPress

CVSS v3.1 PATCHSTACK

5.9 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

EPSS

0.24% chance of exploitation in the next 30 days, 14th percentile

Published

2024-05-08

Updated

2026-04-28

Proof-of-concept exploits (1)

• sanupl/CVE-2024-345681★ · 2026-05-12

References

• CVE Record
• NVD entry

Related

• CVE-2021-45744
• CVE-2021-45745
• CVE-2021-46067
• CVE-2021-46068
• CVE-2021-46070
• CVE-2021-46074