Log in Start free

SendPulse

Products

ProductCVEsExploitedLatest
SendPulse Email Marketing Newsletter4–Aug 1, 2026
SendPulse Free Web Push2–Oct 17, 2024

Exploited and recent CVEs

  • CVE-2026-13362 Medium 6.4 SendPulse Email Marketing Newsletter <= 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via _sp_form_code Post Meta 0.3%
  • CVE-2025-67948 Medium 4.3 WordPress SendPulse Email Marketing Newsletter plugin <= 2.2.1 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2025-47547 Medium 6.5 WordPress SendPulse Email Marketing Newsletter plugin <= 2.1.6 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-22662 Medium 6.5 WordPress SendPulse Email Marketing Newsletter plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-9184 High 7.2 SendPulse Free Web Push <= 1.3.6 - Unauthenticated Stored Cross-Site Scripting 0.5%
  • CVE-2023-45274 Medium 4.3 WordPress SendPulse Free Web Push Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%