Read the docs

brewlabs

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

brewlabs records in CISA KEV

No brewlabs vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2026-67988 CVE-2026-39795 · GHSA-5339-cxjh-26j4

SQL injection in WordPress SendPress Newsletters plugin

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in brewlabs SendPress Newsletters sendpress allows Blind SQL Injection.This issue affects SendPress Newsletters: from n/a…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00302 Published 2026-10-06 No fix listed CWE-89
TI-2026-82274 CVE-2026-93855 · GHSA-j32g-r42g-5gh6

Unauthenticated SQL injection in SendPress Newsletters plugin

Priority LOW 39

The SendPress Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the 'subscriberid' parameter in all versions up to, and including, 1.26.1.20 due to insufficient escaping on the user supplied…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00411 Published 2026-10-29 No fix listed CWE-89
TI-2025-26281 CVE-2025-39539 · GHSA-pvf8-wvcr-7547

WordPress WP Email Delivery plugin <= 1.20.11.23 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brewlabs WP Email Delivery wp-email-delivery allows Reflected XSS.This issue affects WP Email Delivery: from n/a throu…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00288 Published 2025-06-09 No fix listed CWE-79
Open these records in search →