Sendpulse

6 CVEs in 4 Sendpulse products, including Sendpulse Email Marketing Newsletter, Sendpulse Free Web Push, Free Web Push.

Sendpulse products with known CVEs

ProductCVEs
Sendpulse Email Marketing Newsletter4
Sendpulse Free Web Push2
Free Web Push1
Sendpulse Email Marketing Newsletter1
Sendpulse CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-13362Medium6.42026-08-01The SendPulse Email Marketing Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via _sp_form_code Post Meta in all versions up to, a…
CVE-2025-67948Medium4.32025-12-16Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in SendPulse SendPulse Email Marketing Newsletter sendpulse-email-mark…
CVE-2025-47547Medium6.52025-05-07Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SendPulse SendPulse Email Marketing Newsletter sendpulse-…
CVE-2025-22662Medium6.52025-02-04Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SendPulse SendPulse Email Marketing Newsletter sendpulse-…
CVE-2024-9184High7.22024-10-17The SendPulse Free Web Push plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.3.6 due to incorrect use…
CVE-2023-45274Medium4.32023-10-16Cross-Site Request Forgery (CSRF) vulnerability in SendPulse SendPulse Free Web Push plugin <= 1.3.1 versions.