Vulnerabilities in SendPress

4 results

CVE-2023-47517HIGHWordPress SendPress Newsletters Plugin <= 1.23.11.6 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2023-35040MEDIUMWordPress SendPress Newsletters plugin <= 1.23.11.6 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2023-41729MEDIUMWordPress SendPress Newsletters Plugin <= 1.22.3.31 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2023-41730MEDIUMWordPress SendPress Newsletters Plugin <= 1.22.3.31 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%