Bbrewlabs

Products

Exploited and recent CVEs

• CVE-2026-93855 High 7.5 SendPress Newsletters <= 1.26.1.20 - Unauthenticated SQL Injection via 'subscriberid' Parameter 0.4%
• CVE-2026-39795 Critical 9.3 WordPress SendPress Newsletters plugin <= 1.26.1.20 - SQL Injection vulnerability 0.3%
• CVE-2025-49409 Critical 9.8 WordPress SensorPress plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability 0.5%
• CVE-2025-39539 High 7.1 WordPress WP Email Delivery plugin <= 1.20.11.23 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2023-5660 Medium 6.4 SendPress Newsletters <= 1.22.3.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.7%