Sendpulse Free Web Push vulnerabilities

• sendpulse free web push SendPulse Free Web Push <= 1.3.6 - Unauthenticated Stored Cross-Site Scripting CVE-2024-9184 7.2 HighOctober 17, 2024
• sendpulse free web push WordPress SendPulse Free Web Push Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-45274 4.3 MediumOctober 16, 2023