CVE-2026-41555

An unauthenticated SQL injection vulnerability exists in the Newsletter Subscription Form, specifically affecting versions 1.5.9 and earlier. This flaw allows attackers to manipulate database queries, potentially leading to unauthorized data access or data compromise. Organizations using affected versions should prioritize immediate remediation to mitigate the risk of exploitation.