brewlabs SendPress Newsletters

• CVE-2026-93855 High 7.5 SendPress Newsletters <= 1.26.1.20 - Unauthenticated SQL Injection via 'subscriberid' Parameter 0.4%
• CVE-2026-39795 Critical 9.3 WordPress SendPress Newsletters plugin <= 1.26.1.20 - SQL Injection vulnerability 0.3%
• CVE-2023-5660 Medium 6.4 SendPress Newsletters <= 1.22.3.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.7%