WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mailerpress
Published
2026-07-30
Title
MailPress < 1.5.1 - Missing Authorization to Unauthenticated Contact Updates
Slug
mailerpress
Published
2026-07-30
Title
MailerPress < 1.5.1 - Missing Authorization to Unauthenticated Arbitrary Modification via REST API Endpoint
Slug
mailersend-official-smtp-integration
Published
2026-06-29
Title
MailerSend - Official SMTP Integration < 1.0.8 - Settings Deletion and Plugin Deactivation via CSRF
Slug
mailgun
Published
2026-07-13
Title
Mailgun for WordPress < 2.2.1 - Unauthenticated Arbitrary Mailgun List Subscription via add_list AJAX
Slug
mailgun
Published
2026-08-21
Title
Mailgun for WordPress < 2.2.1 - Unauthenticated Server-Side Request Forgery (SSRF) via 'addresses' Array Keys
Slug
mailgun-subscriptions
Published
2025-12-11
Title
Mailgun Subscriptions < 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mailhawk
Published
2025-04-09
Title
WordPress SMTP Service, Email Delivery Solved! — MailHawk < 1.3.2 - Unauthenticated Local File Inclusion
Slug
mailin
Published
2021-12-23
Title
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.25 - Reflected XSS
Slug
mailin
Published
2022-01-12
Title
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.31 - Reflected Cross-Site Scripting
Slug
mailin
Published
2023-05-15
Title
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.61 - Reflected XSS
Slug
mailin
Published
2024-03-22
Title
Newsletter, SMTP, Email marketing and Subscribe forms by Brevo < 3.1.78 - Reflected XSS
Slug
mailin
Published
2024-06-03
Title
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.78 - Reflected Cross-Site Scripting
Slug
mailin
Published
2024-08-16
Title
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.83 - Cross-Site Request Forgery
Slug
mailin
Published
2024-10-09
Title
Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) < 3.1.88 - Cross-Site Request Forgery
Slug
mailin
Published
2026-02-17
Title
Brevo < 3.3.1 - Unauthenticated Authorization Bypass via Type Juggling
Slug
mailjet-for-wordpress
Published
2026-10-05
Title
Mailjet Email Marketing < 6.2.4 - Unauthenticated Information Exposure
Slug
mailmunch
Published
2023-09-05
Title
MailMunch – Grow your Email List < 3.1.3 - Settings Update via CSRF
Slug
mailmunch
Published
2024-04-05
Title
MailMunch – Grow your Email List < 3.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mailmunch
Published
2024-11-21
Title
MailMunch – Grow your Email List < 3.2.0 - Reflected Cross-Site Scripting
Slug
mailmunch
Published
2026-09-08
Title
MailMunch – Grow your Email List < 3.3.1 - Missing Authorization
Slug
mailoptin
Published
2021-06-30
Title
MailOptin < 1.2.35.2 - Unauthorised AJAX Call
Slug
mailoptin
Published
2022-09-23
Title
MailOptin < 1.2.50.0 - Unauthenticated Campaign Cache Deletion
Slug
mailoptin
Published
2023-01-20
Title
MailOptin 1.2.54.0 - Admin+ Stored XSS
Slug
mailoptin
Published
2024-09-23
Title
Popup, Optin Form & Email Newsletters for Mailchimp, HubSpot, AWeber – MailOptin < 1.2.70.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mailoptin
Published
2025-09-03
Title
MailOptin < 1.2.75.1 - Authenticated (Administrator+) Stored Cross-Site Scripting