Campaign Monitor

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Campaign Monitor records in CISA KEV

No Campaign Monitor vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Campaign Monitor 1 record LOW

Records

2 records

TI-2023-19854 CVE-2023-38474 · GHSA-w6gf-7vvp-94w7

WordPress Campaign Monitor for WordPress Plugin <= 2.8.12 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Campaign Monitor Campaign Monitor for WordPress allows Reflected XSS.This issue affects Campaign Monitor for WordPress…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00412 Published 2023-11-30 No fix listed CWE-79

TI-2026-00467 CVE-2026-0674 · GHSA-57g6-cvq3-mxgp

WordPress Campaign Monitor for WordPress plugin <= 2.9.1 - Broken Access Control vulnerability

LOW 19

Missing Authorization vulnerability in Campaign Monitor Campaign Monitor for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0022 Published 2026-01-08 No fix listed CWE-862

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0