Sendpulse

6 CVEs across 4 Sendpulse products. Browse Sendpulse vulnerabilities, severities, and proof-of-concept exploits.

Sendpulse products with known CVEs

Product	CVEs
Sendpulse Email Marketing Newsletter	4
Sendpulse Free Web Push	2
Free Web Push	1
Sendpulse Email Marketing Newsletter	1

Sendpulse CVEs — newest first
CVE	Severity	Score	Published	Summary
`CVE-2026-13362`	Medium	`6.4`	2026-08-01	The SendPulse Email Marketing Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via _sp_form_code Post Meta in all versions up to, a…
`CVE-2025-67948`	Medium	`4.3`	2025-12-16	Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in SendPulse SendPulse Email Marketing Newsletter sendpulse-email-mark…
`CVE-2025-47547`	Medium	`6.5`	2025-05-07	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SendPulse SendPulse Email Marketing Newsletter sendpulse-…
`CVE-2025-22662`	Medium	`6.5`	2025-02-04	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SendPulse SendPulse Email Marketing Newsletter sendpulse-…
`CVE-2024-9184`	High	`7.2`	2024-10-17	The SendPulse Free Web Push plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.3.6 due to incorrect use…
`CVE-2023-45274`	Medium	`4.3`	2023-10-16	Cross-Site Request Forgery (CSRF) vulnerability in SendPulse SendPulse Free Web Push plugin <= 1.3.1 versions.