Skip to contentUnknown Sendpress Newsletters vulnerabilities
- brewlabs sendpress newslettersSendPress Newsletters <= 1.26.1.20 - Unauthenticated SQL Injection via 'subscriberid' ParameterCVE-2026-938557.5 High
- unknown sendpress newslettersSendPress <= 1.26.1.20 - Unauthenticated Newsletter Sending Log Disclosure via Hardcoded TokenCVE-2026-929905.3 Medium
- unknown sendpress newslettersSendPress Newsletters <= 1.26.1.20 - Subscriber+ Mailing List Sync and Newsletter QueueingCVE-2026-929894.3 Medium
- brewlabs sendpress newslettersWordPress SendPress Newsletters plugin <= 1.26.1.20 - SQL Injection vulnerabilityCVE-2026-397959.3 Critical
- pressified sendpress, sendpress newsletters, unknown sendpress newsletters +2 moreWordPress SendPress Newsletters plugin <= 1.23.11.6 - Broken Access Control vulnerabilityCVE-2023-350405.3 Medium
- pressified sendpress, unknown sendpress newsletters +1 moreSendPress Newsletters <= 1.23.11.6 - Admin+ Stored XSS via Form SettingsCVE-2024-15896.1 Medium
- pressified sendpress, unknown sendpress newsletters +1 moreSendPress Newsletters <= 1.23.11.6 - Admin+ Stored XSS via SettingsCVE-2024-15886.8 Medium
- pressified sendpress, sendpress newsletters, unknown sendpress newsletters +2 moreWordPress SendPress Newsletters Plugin <= 1.23.11.6 is vulnerable to Cross Site Scripting (XSS)CVE-2023-475177.1 High
- brewlabs sendpress newsletters, pressified sendpress +1 moreSendPress Newsletters <= 1.22.3.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2023-56606.4 Medium
- pressified sendpress, sendpress newsletters, unknown sendpress newsletters +2 moreWordPress SendPress Newsletters Plugin <= 1.22.3.31 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-417304.3 Medium
- pressified sendpress, sendpress newsletters, unknown sendpress newsletters +2 moreWordPress SendPress Newsletters Plugin <= 1.22.3.31 is vulnerable to Cross Site Scripting (XSS)CVE-2023-417295.9 Medium