Mettle

Products

ProductCVEsExploitedLatest
sendportal4–Jul 9, 2026
sendportal-core1–Oct 15, 2026

Exploited and recent CVEs

  • CVE-2026-111358 Medium 5.4 SendPortal sendportal-core through 4.0.1 Cross-Workspace Tag Attachment via Subscriber Form 0.3%
  • CVE-2026-15192 Medium 6.5 mettle sendportal APIv1 Webhooks mailjet missing authentication 0.8%
  • CVE-2026-15191 Medium 6.3 mettle sendportal Campaign Creation Endpoint CampaignStoreRequest.php authorization 0.4%
  • CVE-2026-10234 Low 3.5 Mettle sendportal Campaign webview cross site scripting 0.2%
  • CVE-2026-7145 Medium 5.4 mettle sendportal Invitation WorkspaceInvitationsController.php destroy authorization 0.2%