Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Omnisend vulnerabilities

5 published CVEs name Omnisend among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2026-97074

    WordPress Newsletters, Email Marketing, SMS and Popups by Omnisend plugin <= 1.9.0 - Insecure Direct Object References (IDOR) vulnerability

    Omnisend · Newsletters, Email Marketing, SMS and Popups by Omnisend

    Medium4.3
  • CVE-2026-57632

    WordPress Email Marketing for WooCommerce by Omnisend plugin <= 1.19.0 - Broken Access Control vulnerability

    Omnisend · Email Marketing for WooCommerce by Omnisend

    Medium5.4
  • CVE-2026-42668

    WordPress Email Marketing for WooCommerce by Omnisend plugin <= 1.18.0 - Broken Authentication vulnerability

    Omnisend · Email Marketing for WooCommerce by Omnisend

    High7.5
  • CVE-2024-32101

    WordPress Email Marketing for WooCommerce plugin <= 1.14.3 - Cross Site Request Forgery (CSRF) vulnerability

    Omnisend · Email Marketing for WooCommerce by Omnisend

    Medium4.3
  • CVE-2023-47244

    WordPress Email Marketing for WooCommerce by Omnisend Plugin <= 1.13.8 is vulnerable to Sensitive Data Exposure

    Omnisend · Email Marketing for WooCommerce by Omnisend

    Medium5.3
All 5 in the list