Advisories · Technology

brewlabs SendPress Newsletters.

Every CVE that names brewlabs SendPress Newsletters among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-93855 CVE record

CVSS 7.5 High

SendPress Newsletters <= 1.26.1.20 - Unauthenticated SQL Injection via 'subscriberid' Parameter
- brewlabs SendPress Newsletters
- SQL injection
Not analysed yet 29 Oct 2026
CVE-2026-39795 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress SendPress Newsletters plugin <= 1.26.1.20 - SQL Injection vulnerability
- brewlabs SendPress Newsletters
- SQL injection
Not analysed yet 6 Oct 2026
CVE-2023-5660 CVE record

CVSS 6.4 Medium

SendPress Newsletters <= 1.22.3.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- brewlabs SendPress Newsletters
- Cross-site scripting (XSS)
Not analysed yet 7 Nov 2023