CVE-2026-41555: Weblizar – WordPress Themes & Plugin Newsletter Subscription Form – User Subscriptions Form, Capture Email

Critical severity, CVSS 9.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email <= 1.5.9 versions.

Affected products

• Weblizar – WordPress Themes & Plugin Newsletter Subscription Form – User Subscriptions Form, Capture Email: up to and including 1.5.9

Published 2026-10-06. Last modified 2026-10-06.