WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
send-users-email
Published
2024-07-12
Title
Send Users Email < 1.5.2 - Unauthenticated Information Exposure
Slug
sender
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
sender-net-automated-emails
Published
2024-08-01
Title
Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce < 2.6.19 - Cross-Site Request Forgery
Slug
sender-net-automated-emails
Published
2024-08-07
Title
Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce < 2.6.16 - Reflected Cross-Site Scripting
Slug
sendgrid-email-delivery-simplified
Published
2021-07-21
Title
SendGrid <= 1.11.8 - Authenticated Authorization Bypass
Slug
sendit
Published
2014-08-01
Title
SendIt <= 1.5.9 - Blind SQL Injection
Slug
sendit
Published
2014-09-19
Title
Sendit < 2.1.1 - SQL Injection
Slug
sendit
Published
2021-05-27
Title
Sendit WP Newsletter <= 2.5.1 - Authenticated (admin+) SQL Injection
Slug
sendpress
Published
2015-07-23
Title
SendPress Newsletters < 1.2 - Authenticated SQL Injection
Slug
sendpress
Published
2020-07-13
Title
SendPress Newsletter < 1.20.7.13 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
sendpress
Published
2023-10-02
Title
SendPress Newsletters <= 1.26.1.20 - Admin+ Stored XSS
Slug
sendpress
Published
2023-09-05
Title
SendPress Newsletters <= 1.26.1.20 - CSRF
Slug
sendpress
Published
2023-11-06
Title
SendPress Newsletters < 1.23.11.6 - Contributor+ Stored XSS
Slug
sendpress
Published
2023-11-07
Title
SendPress Newsletters < 1.24.8.19 - Reflected XSS
Slug
sendpress
Published
2024-03-18
Title
SendPress Newsletters <= 1.23.11.6 - Admin+ Stored XSS via Form Settings
Slug
sendpress
Published
2024-03-18
Title
SendPress Newsletters <= 1.23.11.6 - Admin+ Stored XSS via Settings
Slug
sendpulse-email-marketing-newsletter
Published
2025-02-03
Title
SendPulse Email Marketing Newsletter < 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sendpulse-email-marketing-newsletter
Published
2025-05-07
Title
SendPulse Email Marketing Newsletter < 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sendpulse-email-marketing-newsletter
Published
2025-12-05
Title
SendPulse Email Marketing Newsletter < 2.2.2 - Authenticated (Subscriber+) Information Exposure
Slug
sendpulse-web-push
Published
2023-10-16
Title
SendPulse Free Web Push < 1.3.2 - CSRF
Slug
sendpulse-web-push
Published
2024-10-16
Title
SendPulse Free Web Push < 1.3.7 - Unauthenticated Stored Cross-Site Scripting
Slug
sendsms
Published
2024-12-17
Title
SendSMS <= 1.2.9 - Reflected Cross-Site Scripting
Slug
sendy
Published
2026-01-28
Title
Sendy <= 3.4.1 - Missing Authorization
Slug
sensei-lms
Published
2022-08-04
Title
Sensei LMS < 4.5.0 - Unauthenticated Private Messages Disclosure via Rest API
Slug
sensei-lms
Published
2022-08-04
Title
Sensei LMS < 4.5.2 - Arbitrary Private Message Sending via IDOR