Read the docs

mailerpress

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

mailerpress records in CISA KEV

No mailerpress vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-15151 CVE-2026-18437 · GHSA-gjcp-gv56-hccw

MailPress <= 1.5.0 - Missing Authorization to Unauthenticated Contact Updates

Priority LOW 30

The MailerPress – Newsletter, email marketing & AI automation plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the `mailerpress/v1/contact` endpoint in all versions up to, an…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0039 Published 2026-07-31 No fix listed CWE-862
TI-2026-15150 CVE-2026-18436 · GHSA-vfgx-g9m5-wfgv

MailerPress <= 1.5.0 - Missing Authorization to Unauthenticated Arbitrary Modification via REST API Endpoint

Priority LOW 30

The MailPress plugin for WordPress is vulnerable to unauthorized access in versions up to, and including, 1.5.0 via the campaign revision-restore REST endpoint (POST /wp-json/mailpress/v1/campaign/<id>/restore-revision/<…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0039 Published 2026-07-31 No fix listed CWE-862
TI-2026-07557 CVE-2026-8599 · GHSA-9jw9-xmq5-9839

MailerPress <= 2.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via Campaign HTML Content Field

Priority LOW 28

The MailerPress – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Campaign HTML Content Field in all versions up to, and including,…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00234 Published 2026-06-09 No fix listed CWE-79
Open these records in search →