Sender
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce | 4 | – | Nov 4, 2026 |
Exploited and recent CVEs
- CVE-2026-119745 Sender WordPress Plugin < 2.11.3 Broken Access Control via admin_post_sender_debug_download 0.2%
- CVE-2026-59537 WordPress Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce plugin <= 2.10.22 - SQL Injection vulnerability 0.4%
- CVE-2024-39657 WordPress Sender plugin <= 2.6.18 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2024-43126 WordPress Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce plugin <= 2.6.14 - Cross Site Scripting (XSS) vulnerability 0.3%