Advisories · Technology

Email Marketing for WordPress and WooCommerce – Retainful.

Every CVE that names Email Marketing for WordPress and WooCommerce – Retainful among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-97396 CVE record

CVSS 6.4 Medium

Email Marketing for WordPress and WooCommerce <= 1.0.10 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'data' Parameter to /updateOptions REST Endpoint
- Email Marketing for WordPress and WooCommerce – Retainful
- Cross-site scripting (XSS)
Not analysed yet 10 Oct 2026