Advisories · Technology

SendPress Newsletters.

Every CVE that names SendPress Newsletters among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-92990 CVE record

CVSS 5.3 Medium

SendPress <= 1.26.1.20 - Unauthenticated Newsletter Sending Log Disclosure via Hardcoded Token
- SendPress Newsletters
- Information disclosure
Not analysed yet 9 Oct 2026
CVE-2026-92989 CVE record

CVSS 4.3 Medium

SendPress Newsletters <= 1.26.1.20 - Subscriber+ Mailing List Sync and Newsletter Queueing
- SendPress Newsletters
- Broken access control
Not analysed yet 9 Oct 2026
CVE-2023-35040 CVE record

CVSS 5.3 Medium

WordPress SendPress Newsletters plugin <= 1.23.11.6 - Broken Access Control vulnerability
- SendPress Newsletters
- Broken access control
Not analysed yet 13 Jun 2024
CVE-2024-1589 CVE record

CVSS 6.1 Medium

SendPress Newsletters <= 1.23.11.6 - Admin+ Stored XSS via Form Settings
- SendPress Newsletters
- Cross-site scripting (XSS)
Not analysed yet 8 Apr 2024
CVE-2024-1588 CVE record

CVSS 6.8 Medium

SendPress Newsletters <= 1.23.11.6 - Admin+ Stored XSS via Settings
- SendPress Newsletters
Not analysed yet 8 Apr 2024
CVE-2023-47517 CVE record

CVSS 7.1 High

WordPress SendPress Newsletters Plugin <= 1.23.11.6 is vulnerable to Cross Site Scripting (XSS)
- SendPress Newsletters
- Cross-site scripting (XSS)
Not analysed yet 14 Nov 2023
CVE-2023-41730 CVE record

CVSS 4.3 Medium

WordPress SendPress Newsletters Plugin <= 1.22.3.31 is vulnerable to Cross Site Request Forgery (CSRF)
- SendPress Newsletters
- Cross-site request forgery (CSRF)
Not analysed yet 10 Oct 2023
CVE-2023-41729 CVE record

CVSS 5.9 Medium

WordPress SendPress Newsletters Plugin <= 1.22.3.31 is vulnerable to Cross Site Scripting (XSS)
- SendPress Newsletters
- Cross-site scripting (XSS)
Not analysed yet 2 Oct 2023