Plugin icon

Email Marketing for WooCommerce by Omnisend

omnisend-connect

Vulnerabilities:

4

Last Updated:

August 14, 2026

Active Installs:

40000

Published
Title
Fixed in
CVSS
Published
2026-06-26
Title
Email Marketing for WooCommerce by Omnisend < 1.19.1 - Missing Authorization
Fixed in
Fixed in 1.19.1
CVSS
4.3 (medium)
Published
2026-05-13
Title
Omnisend for WooCommerce < 1.18.1 - Unauthenticated Omnisend Account Takeover via Predictable Connect Token
Fixed in
Fixed in 1.18.1
CVSS
7.5 (high)
Published
2024-04-11
Title
Email Marketing for WooCommerce by Omnisend < 1.14.4 - Cross-Site Request Forgery
Fixed in
Fixed in 1.14.4
CVSS
4.3 (medium)
Published
2023-11-07
Title
Email Marketing for WooCommerce by Omnisend < 1.13.9 - Sensitive Information Exposure
Fixed in
Fixed in 1.13.9
CVSS
5.3 (medium)