Sendpulse vulnerabilities

Products

• Email Marketing Newsletter 4
• Free Web Push 2
• Free Web Push 2

Newest

• sendpulse email marketing newsletter SendPulse Email Marketing Newsletter <= 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via _sp_form_code Post Meta CVE-2026-13362 6.4 MediumAugust 1, 2026
• sendpulse email marketing newsletter WordPress SendPulse Email Marketing Newsletter plugin <= 2.2.1 - Sensitive Data Exposure vulnerability CVE-2025-67948 4.3 MediumDecember 16, 2025
• sendpulse email marketing newsletter WordPress SendPulse Email Marketing Newsletter plugin <= 2.1.6 - Cross Site Scripting (XSS) Vulnerability CVE-2025-47547 6.5 MediumMay 7, 2025
• sendpulse email marketing newsletter WordPress SendPulse Email Marketing Newsletter plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability CVE-2025-22662 6.5 MediumFebruary 4, 2025
• sendpulse free web push SendPulse Free Web Push <= 1.3.6 - Unauthenticated Stored Cross-Site Scripting CVE-2024-9184 7.2 HighOctober 17, 2024
• sendpulse free web push WordPress SendPulse Free Web Push Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-45274 4.3 MediumOctober 16, 2023