Advisories · Technology

Newsletters, Email Marketing, SMS and Popups by Omnisend.

Every CVE that names Newsletters, Email Marketing, SMS and Popups by Omnisend among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-97074 CVE record

CVSS 4.3 Medium

WordPress Newsletters, Email Marketing, SMS and Popups by Omnisend plugin <= 1.9.0 - Insecure Direct Object References (IDOR) vulnerability
- Newsletters, Email Marketing, SMS and Popups by Omnisend
- Broken access control
Not analysed yet 30 Sept 2026