Product by SendPress

    SendPress Newsletters

    8 known vulnerabilities in SendPress Newsletters (SendPress), 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in SendPress Newsletters (SendPress)
    HighCVE-2015-9448

    Pressified SendPress: SQL Injection

    		8.8
    MediumCVE-2024-1588

    SendPress Newsletters <= 1.23.11.6 - Admin+ Stored XSS via Settings

    		6.8
    MediumCVE-2023-5660

    Brewlabs SendPress Newsletters: Cross-site Scripting

    also in 1 other product

    		6.4
    HighCVE-2023-47517

    WordPress SendPress Newsletters Plugin <= 1.23.11.6 is vulnerable to Cross Site Scripting (XSS)

    also in 1 other product

    		7.1
    MediumCVE-2024-1589

    SendPress Newsletters <= 1.23.11.6 - Admin+ Stored XSS via Form Settings

    		6.1
    CriticalCVE-2023-35040

    WordPress SendPress Newsletters plugin <= 1.23.11.6 - Broken Access Control vulnerability

    also in 1 other product

    		5.3
    MediumCVE-2023-41729

    WordPress SendPress Newsletters Plugin <= 1.22.3.31 is vulnerable to Cross Site Scripting (XSS)

    also in 1 other product

    		5.9
    HighCVE-2023-41730

    SendPress Newsletters: Cross-Site Request Forgery (CSRF)

    also in 1 other product

    		4.3

    All products by SendPress