CVE-2023-35040
Published Jun 14, 2024Missing Authorization vulnerability in SendPress SendPress Newsletters.This issue affects SendPress Newsletters: from n/a through 1.23.11.6.
- evidence mentions
- 1
- Buzz score
- 11.9
Vendor/product archive
pressified / sendpress CVEs
Beta · best-effort8 CVEs tagged to pressified / sendpress — 0 Critical, 2 High, 6 Medium, 0 Low, 0 Unrated.
CVE-2024-1589
Published Apr 8, 2024The SendPress Newsletters WordPress plugin through 1.23.11.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Sto…
CVE-2024-1588
Published Apr 8, 2024The SendPress Newsletters WordPress plugin through 1.23.11.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Sto…
CVE-2023-47517
Published Nov 14, 2023Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in SendPress Newsletters plugin <= 1.23.11.6 versions.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-5660
Published Nov 7, 2023The SendPress Newsletters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 1.22.3.31 due to in…
- evidence mentions
- 2
- Buzz score
- 16.0
CVE-2023-41730
Published Oct 10, 2023Cross-Site Request Forgery (CSRF) vulnerability in SendPress Newsletters plugin <= 1.22.3.31 versions.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-41729
Published Oct 2, 2023Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SendPress Newsletters plugin <= 1.22.3.31 versions.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2015-9448
Published Sep 26, 2019The sendpress plugin before 1.2 for WordPress has SQL Injection via the wp-admin/admin.php?page=sp-queue listid parameter.
Showing 1-8 of 8 CVEsPage 1 of 1