WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
sendpress
Published
2023-11-06
Title
SendPress Newsletters < 1.23.11.6 - Contributor+ Stored XSS
Slug
sendpress
Published
2023-11-07
Title
SendPress Newsletters < 1.24.8.19 - Reflected XSS
Slug
sendpress
Published
2024-03-18
Title
SendPress Newsletters <= 1.23.11.6 - Admin+ Stored XSS via Form Settings
Slug
sendpress
Published
2024-03-18
Title
SendPress Newsletters <= 1.23.11.6 - Admin+ Stored XSS via Settings
Slug
sendpress
Published
2026-10-06
Title
SendPress Newsletters <= 1.26.1.20 - Subscriber+ Mailing List Sync and Newsletter Queueing
Slug
sendpress
Published
2026-10-06
Title
SendPress <= 1.26.1.20 - Unauthenticated Newsletter Sending Log Disclosure via Hardcoded Token
Slug
sendpress
Published
2026-10-05
Title
SendPress Newsletters <= 1.26.1.20 - Unauthenticated SQL Injection
Slug
sendpress
Published
2026-10-28
Title
SendPress Newsletters <= 1.26.1.20 - Unauthenticated SQL Injection via 'subscriberid' Parameter
Slug
sendpulse-email-marketing-newsletter
Published
2025-02-03
Title
SendPulse Email Marketing Newsletter < 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sendpulse-email-marketing-newsletter
Published
2025-05-07
Title
SendPulse Email Marketing Newsletter < 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sendpulse-email-marketing-newsletter
Published
2025-12-05
Title
SendPulse Email Marketing Newsletter < 2.2.2 - Authenticated (Subscriber+) Information Exposure
Slug
sendpulse-email-marketing-newsletter
Published
2026-07-31
Title
SendPulse Email Marketing Newsletter < 2.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via _sp_form_code Post Meta
Slug
sendpulse-web-push
Published
2023-10-16
Title
SendPulse Free Web Push < 1.3.2 - CSRF
Slug
sendpulse-web-push
Published
2024-10-16
Title
SendPulse Free Web Push < 1.3.7 - Unauthenticated Stored Cross-Site Scripting
Slug
sendsms
Published
2024-12-17
Title
SendSMS <= 1.2.9 - Reflected Cross-Site Scripting
Slug
sendy
Published
2026-01-28
Title
Sendy < 3.4.3 - Missing Authorization
Slug
sensei-lms
Published
2022-08-04
Title
Sensei LMS < 4.5.0 - Unauthenticated Private Messages Disclosure via Rest API
Slug
sensei-lms
Published
2022-08-04
Title
Sensei LMS < 4.5.2 - Arbitrary Private Message Sending via IDOR
Slug
sensei-lms
Published
2023-12-22
Title
Sensei LMS < 4.18.0 - Contributor+ Stored XSS
Slug
sensei-lms
Published
2024-06-06
Title
Sensei LMS <= 4.23.1 & Sensei Pro (WC Paid Courses) <= 4.24.0.1.24.0 - Unauthenticated Rewrite Rules Flushing
Slug
sensei-lms
Published
2024-08-14
Title
Sensei LMS < 4.24.2 - Unauthenticated Email Template Leak
Slug
sensei-lms
Published
2023-12-14
Title
Sensei LMS < 4.20.0 - Teacher+ Users Email Address Disclosure
Slug
sensei-lms
Published
2025-01-14
Title
Sensei LMS < 4.24.4 - Unauthenticated sensei_email/sensei_message Disclosure
Slug
sensei-lms
Published
2025-03-27
Title
Sensei LMS < 4.24.5 - Missing Authorization
Slug
sensei-lms
Published
2026-10-19
Title
Sensei LMS – Online Courses, Quizzes, & Learning < 4.26.4 - Missing Authorization