Vendors / Omnisend Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Omnisend records in CISA KEV No Omnisend vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 39
Unauthenticated Broken Authentication in Email Marketing for WooCommerce by Omnisend <= 1.18.0 versions.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00427 · Published 2026-06-15 · No fix listed CWE-288
Priority LOW 34
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Omnisend Email Marketing for WooCommerce by Omnisend.This issue affects Email Marketing for WooCommerce by Omnisend: from n/a through 1.13.8.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00553 · Published 2023-11-23 · No fix listed CWE-200
Priority LOW 24
Subscriber Broken Access Control in Email Marketing for WooCommerce by Omnisend <= 1.19.0 versions.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00287 · Published 2026-06-26 · No fix listed CWE-862
Priority LOW 20
Subscriber Insecure Direct Object References (IDOR) in Newsletters, Email Marketing, SMS and Popups by Omnisend <= 1.9.0 versions.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00246 · Published 2026-09-30 · No fix listed CWE-639
Priority LOW 19
Cross-Site Request Forgery (CSRF) vulnerability in Omnisend Email Marketing for WooCommerce by Omnisend omnisend-connect.This issue affects Email Marketing for WooCommerce by Omnisend: from n/a through <= 1.14.3.
CVSS 3.1 MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00214 · Published 2024-04-15 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
0 2 3 0 0
THREATIST.IORead the docs