Vulnerabilities in SendPulse

6 results

Vexday analysis

SendPulse apresenta um risco baixo com apenas 4 vulnerabilidades conhecidas e nenhuma sob exploração ativa ou crítica. A fraqueza predominante é cross-site scripting (CWE-79), tipicamente de menor severidade, e não há descobertas recentes, indicando situação estável no curto prazo.

CVE-2024-9184HIGHSendPulse Free Web Push <= 1.3.6 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.5%CVE-2025-67948MEDIUMWordPress SendPulse Email Marketing Newsletter plugin <= 2.2.1 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2025-47547MEDIUMWordPress SendPulse Email Marketing Newsletter plugin <= 2.1.6 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2025-22662MEDIUMWordPress SendPulse Email Marketing Newsletter plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2023-45274MEDIUMWordPress SendPulse Free Web Push Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2026-13362MEDIUMSendPulse Email Marketing Newsletter <= 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via _sp_form_code Post MetaEPSS 0.2%