Vulnerabilities in sendpulse

6 results

Vexday analysis

SendPulse apresenta postura de risco mínima com apenas 1 CVE catalogado na base, sem registros de exploração ativa (KEV) ou severidade crítica. A vulnerabilidade identificada é do tipo XSS (CWE-79), não recente, indicando exposição baixa e controlada no momento.

CVE-2024-9184HIGHSendPulse Free Web Push <= 1.3.6 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.5%CVE-2025-67948MEDIUMWordPress SendPulse Email Marketing Newsletter plugin <= 2.2.1 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2025-47547MEDIUMWordPress SendPulse Email Marketing Newsletter plugin <= 2.1.6 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2025-22662MEDIUMWordPress SendPulse Email Marketing Newsletter plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2023-45274MEDIUMWordPress SendPulse Free Web Push Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2026-13362MEDIUMSendPulse Email Marketing Newsletter <= 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via _sp_form_code Post MetaEPSS 0.2%