Skip to content
Unknown Newsletters vulnerabilities
-
brewlabs sendpress newsletters
SendPress Newsletters <= 1.26.1.20 - Unauthenticated SQL Injection via 'subscriberid' Parameter
CVE-2026-93855
7.5 High
-
unknown sendpress newsletters
SendPress <= 1.26.1.20 - Unauthenticated Newsletter Sending Log Disclosure via Hardcoded Token
CVE-2026-92990
5.3 Medium
-
unknown sendpress newsletters
SendPress Newsletters <= 1.26.1.20 - Subscriber+ Mailing List Sync and Newsletter Queueing
CVE-2026-92989
4.3 Medium
-
brewlabs sendpress newsletters
WordPress SendPress Newsletters plugin <= 1.26.1.20 - SQL Injection vulnerability
CVE-2026-39795
9.3 Critical
-
icegram email subscribers & newsletters
Email Subscribers by Icegram Express < 5.9.35 - Unauthenticated Subscription Status Change via Missing Token Verification
CVE-2026-83555
5.3 Medium
-
tribulant software newsletters
Newsletters < 4.18.1 - Unauthenticated Subscriber Record Overwrite and PII Disclosure via IDOR
CVE-2026-16264
6.5 Medium
-
trainingbusinesspros groundhogg — crm, newsletters, and marketing automation
Groundhogg < 4.7.2 - Open Redirect via 'redirect_to' Parameter
CVE-2026-81741
4.7 Medium
-
trainingbusinesspros groundhogg — crm, newsletters, and marketing automation
Groundhogg < 4.5.13 - Unauthenticated Stored XSS via Web Form Dropdown/Radio Field
CVE-2026-81660
8.8 High
-
tribulant software newsletters
Newsletters < 4.17 - Arbitrary Plugin Option Update via CSRF
CVE-2026-17522
5.4 Medium
-
tribulant software newsletters
Newsletters < 4.17 - Unauthenticated API Access via Predictable API Key
CVE-2026-17520
4.8 Medium
-
tribulant software newsletters
Newsletters < 4.16 - Unauthenticated API Authentication Bypass via Type Juggling
CVE-2026-16269
4.8 Medium
-
tribulant software newsletters
Newsletters < 4.16 - Unauthenticated PHP Object Injection via Date Form Field
CVE-2026-16267
8.1 High
-
tribulant software newsletters
Newsletters < 4.16 - Unauthenticated Server-Side Request Forgery via SNS Bounce Handler
CVE-2026-16268
8.2 High
-
tribulant software newsletters
Newsletters < 4.15 - Unauthenticated PHP Object Injection via Subscriber Custom Field
CVE-2026-12583
8.1 High
-
unknown wemail: email marketing, email automation, newsletters, subscribers & email optins for woocommerce
weMail < 2.1.3 - Reflected Cross-Site Scripting
CVE-2026-8089
7.1 High
-
pressified sendpress, sendpress newsletters, unknown sendpress newsletters +2 more
WordPress SendPress Newsletters plugin <= 1.23.11.6 - Broken Access Control vulnerability
CVE-2023-35040
5.3 Medium
-
pressified sendpress, unknown sendpress newsletters +1 more
SendPress Newsletters <= 1.23.11.6 - Admin+ Stored XSS via Form Settings
CVE-2024-1589
6.1 Medium
-
pressified sendpress, unknown sendpress newsletters +1 more
SendPress Newsletters <= 1.23.11.6 - Admin+ Stored XSS via Settings
CVE-2024-1588
6.8 Medium
-
tribulant newsletters
Newsletter Lite < 4.9.3 - Admin+ Command Injection
CVE-2023-4797
7.2 High
-
pressified sendpress, sendpress newsletters, unknown sendpress newsletters +2 more
WordPress SendPress Newsletters Plugin <= 1.23.11.6 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-47517
7.1 High
-
brewlabs sendpress newsletters, pressified sendpress +1 more
SendPress Newsletters <= 1.22.3.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-5660
6.4 Medium
-
pressified sendpress, sendpress newsletters, unknown sendpress newsletters +2 more
WordPress SendPress Newsletters Plugin <= 1.22.3.31 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-41730
4.3 Medium
-
pressified sendpress, sendpress newsletters, unknown sendpress newsletters +2 more
WordPress SendPress Newsletters Plugin <= 1.22.3.31 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-41729
5.9 Medium
-
icegram email subscribers & newsletters, email subscribers \& newsletters +1 more
Email Subscribers & Newsletters < 5.3.2 - Subscriber+ Blind SQL injection
CVE-2022-0439
Public exploit
8.8 High