Veille CVE

Recherche « Unknown SendPress Newsletters »

2 CVE

Critique 0 Élevée 0 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown SendPress Newsletters » ✕
  1. CVE-2026-92990 5.3 Moyenne

    Unknown SendPress Newsletters

    The SendPress Newsletters WordPress plugin through 1.26.1.20 protects a logging endpoint with a hardcoded token that is the same on every site rather than a per-site secret, allowing unauthenticated users to read newsletter sending logs, including recipient email addresses.

  2. CVE-2026-92989 4.3 Moyenne

    Unknown SendPress Newsletters

    The SendPress Newsletters WordPress plugin through 1.26.1.20 does not check the user's capability on several newsletter-management actions, allowing any authenticated subscriber-level user to synchronise all site users into a mailing list and to drive the newsletter send queue.