Omnisend
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Email Marketing for WooCommerce by Omnisend | 4 | – | Jun 26, 2026 |
| Newsletters, Email Marketing, SMS and Popups by Omnisend | 1 | – | Sep 30, 2026 |
Exploited and recent CVEs
- CVE-2026-97074 WordPress Newsletters, Email Marketing, SMS and Popups by Omnisend plugin <= 1.9.0 - Insecure Direct Object References (IDOR) vulnerability 0.2%
- CVE-2026-57632 WordPress Email Marketing for WooCommerce by Omnisend plugin <= 1.19.0 - Broken Access Control vulnerability 0.3%
- CVE-2026-42668 WordPress Email Marketing for WooCommerce by Omnisend plugin <= 1.18.0 - Broken Authentication vulnerability 0.4%
- CVE-2024-32101 WordPress Email Marketing for WooCommerce plugin <= 1.14.3 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2023-47244 WordPress Email Marketing for WooCommerce by Omnisend Plugin <= 1.13.8 is vulnerable to Sensitive Data Exposure 0.6%