SendPulse vulnerabilities
6 published CVEs name SendPulse among the affected products.
- 6Published CVEs6 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-13362
SendPulse Email Marketing Newsletter <= 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via _sp_form_code Post Meta
sendpulse · SendPulse Email Marketing Newsletter
Medium6.4 - CVE-2025-67948
WordPress SendPulse Email Marketing Newsletter plugin <= 2.2.1 - Sensitive Data Exposure vulnerability
SendPulse · SendPulse Email Marketing Newsletter
Medium4.3 - CVE-2025-47547
WordPress SendPulse Email Marketing Newsletter plugin <= 2.1.6 - Cross Site Scripting (XSS) Vulnerability
SendPulse · SendPulse Email Marketing Newsletter
Medium6.5 - CVE-2025-22662
WordPress SendPulse Email Marketing Newsletter plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability
SendPulse · SendPulse Email Marketing Newsletter
Medium6.5 - CVE-2024-9184
SendPulse Free Web Push <= 1.3.6 - Unauthenticated Stored Cross-Site Scripting
sendpulse · SendPulse Free Web Push
High7.2 - CVE-2023-45274
WordPress SendPulse Free Web Push Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)
SendPulse · SendPulse Free Web Push
Medium4.3