mailerpress
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| MailerPress – Newsletter, email marketing & AI automation | 2 | – | Jul 31, 2026 |
| MailerPress – Email Marketing, Newsletter, Email Automation & WooCommerce Emails | 1 | – | Jun 9, 2026 |
Exploited and recent CVEs
- CVE-2026-18436 MailerPress <= 1.5.0 - Missing Authorization to Unauthenticated Arbitrary Modification via REST API Endpoint 0.4%
- CVE-2026-18437 MailPress <= 1.5.0 - Missing Authorization to Unauthenticated Contact Updates 0.4%
- CVE-2026-8599 MailerPress <= 2.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via Campaign HTML Content Field 0.2%