Read the docs

GetResponse

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

GetResponse records in CISA KEV

No GetResponse vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Getresponse 2 records MEDIUM

Records

5 records

TI-2023-00161 CVE-2023-0167 · GHSA-3cvv-64cv-vrmx

GetResponse for WordPress <= 5.5.31 - Contributor+ Stored XSS

Priority MEDIUM 58

The GetResponse for WordPress plugin through 5.5.31 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00534 Published 2023-03-20 No fix listed
TI-2025-39716 CVE-2025-64273 · GHSA-prrr-cqjj-3chg

WordPress Email marketing for WordPress by GetResponse Official plugin <= 1.5.3 - Broken Access Control vulnerability

Priority LOW 34

Missing Authorization vulnerability in GetResponse Email marketing for WordPress by GetResponse Official getresponse-official allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ema…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00207 Published 2025-12-18 No fix listed CWE-862
TI-2025-39715 CVE-2025-64272 · GHSA-2pww-22wf-fgm9

WordPress Email marketing for WordPress by GetResponse Official plugin <= 1.5.3 - Sensitive Data Exposure vulnerability

Priority LOW 29

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in GetResponse Email marketing for WordPress by GetResponse Official getresponse-official allows Retrieve Embedded Sensitive Data.T…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00321 Published 2025-12-18 No fix listed CWE-497
TI-2024-20493 CVE-2024-31104 · GHSA-vc4m-4636-4w6m

WordPress GetResponse for WordPress plugin <= 5.5.33 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GetResponse GetResponse for WordPress allows Stored XSS.This issue affects GetResponse for WordPress: from n/a through…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0034 Published 2024-03-31 No fix listed CWE-79
Open these records in search →