Omnisend

Products

Exploited and recent CVEs

  • CVE-2026-97074 Medium 4.3 WordPress Newsletters, Email Marketing, SMS and Popups by Omnisend plugin <= 1.9.0 - Insecure Direct Object References (IDOR) vulnerability 0.2%
  • CVE-2026-57632 Medium 5.4 WordPress Email Marketing for WooCommerce by Omnisend plugin <= 1.19.0 - Broken Access Control vulnerability 0.3%
  • CVE-2026-42668 High 7.5 WordPress Email Marketing for WooCommerce by Omnisend plugin <= 1.18.0 - Broken Authentication vulnerability 0.4%
  • CVE-2024-32101 Medium 4.3 WordPress Email Marketing for WooCommerce plugin <= 1.14.3 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2023-47244 Medium 5.3 WordPress Email Marketing for WooCommerce by Omnisend Plugin <= 1.13.8 is vulnerable to Sensitive Data Exposure 0.6%