Advisories · Technology

Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce.

Every CVE that names Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-119745 CVE record

CVSS 5.3 Medium

Sender WordPress Plugin < 2.11.3 Broken Access Control via admin_post_sender_debug_download
- Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce
- Broken access control
Not analysed yet 4 Nov 2026
CVE-2026-59537 CVE record

CVSS 7.6 High

WordPress Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce plugin <= 2.10.22 - SQL Injection vulnerability
- Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce
- SQL injection
Not analysed yet 27 Jul 2026
CVE-2024-39657 CVE record

CVSS 4.3 Medium

WordPress Sender plugin <= 2.6.18 - Cross Site Request Forgery (CSRF) vulnerability
- Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce
- Cross-site request forgery (CSRF)
Not analysed yet 26 Aug 2024
CVE-2024-43126 CVE record

CVSS 7.1 High

WordPress Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce plugin <= 2.6.14 - Cross Site Scripting (XSS) vulnerability
- Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce
- Cross-site scripting (XSS)
Not analysed yet 12 Aug 2024