Plugin icon

MailerPress – Email Marketing, Newsletter, Email Automation & WooCommerce Emails

mailerpress

Vulnerabilities:

5

Last Updated:

October 26, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-07-30
Title
MailPress < 1.5.1 - Missing Authorization to Unauthenticated Contact Updates
Fixed in
Fixed in 1.5.1
CVSS
5.3 (medium)
Published
2026-07-30
Title
MailerPress < 1.5.1 - Missing Authorization to Unauthenticated Arbitrary Modification via REST API Endpoint
Fixed in
Fixed in 1.5.1
CVSS
5.3 (medium)
Published
2026-07-08
Title
MailerPress < 2.0.3 - Contributor+ Privilege Escalation
Fixed in
Fixed in 2.0.3
CVSS
7.2 (high)
Published
2026-06-08
Title
MailerPress < 2.0.5 - Authenticated (Author+) Stored Cross-Site Scripting via Campaign HTML Content Field
Fixed in
Fixed in 2.0.5
CVSS
5.5 (medium)
Published
2026-02-13
Title
MailerPress < 1.5.0 - Authenticated (Contributor+) Server-Side Request Forgery
Fixed in
Fixed in 1.5.0
CVSS
5.5 (medium)