Security
فارسی
All products

sendpress

WordPress · Plugin
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
SendPress Newsletters <= 1.26.1.20 - Unauthenticated SQL Injection via 'subscriberid' ParameterCVE-2026-93855 sendpress WordPress High No fix reported
SendPress <= 1.26.1.20 - Unauthenticated Information ExposureCVE-2026-92990 sendpress WordPress Medium No fix reported
SendPress Newsletters <= 1.26.1.20 - Missing AuthorizationCVE-2026-92989 sendpress WordPress Medium No fix reported
SendPress Newsletters <= 1.26.1.20 - Unauthenticated SQL InjectionCVE-2026-39795 sendpress WordPress High No fix reported
SendPress Newsletters <= 1.23.11.6 - Reflected Cross-Site ScriptingCVE-2023-47517 sendpress WordPress Medium Fix reported
SendPress Newsletters <= 1.23.11.6 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2023-41729 sendpress WordPress Medium No fix reported
SendPress Newsletters <= 1.23.11.6 - Cross-Site Request ForgeryCVE-2023-41730 sendpress WordPress Medium No fix reported
SendPress Newsletters <= 1.23.11.6 - Missing AuthorizationCVE-2023-35040 sendpress WordPress Medium No fix reported
SendPress Newsletters < 1.20.7.13 - Authenticated Stored Cross-Site Scripting sendpress WordPress Medium Fix reported
SendPress Newsletters <= 1.22.3.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2023-5660 sendpress WordPress Medium Fix reported
SendPress Newsletters < 1.2 - Authenticated SQL InjectionCVE-2015-9448 sendpress WordPress High Fix reported
SendPress Newsletters < 1.2 - Cross-Site Scripting sendpress WordPress Medium Fix reported