sendmachine

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

sendmachine records in CISA KEV

No sendmachine vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-05469 CVE-2026-6235 · GHSA-4x86-c4g3-px96

Sendmachine for WordPress <= 1.0.20 - Unauthenticated SMTP Hijack to Privilege Escalation via manage_admin_requests

MEDIUM 50

The Sendmachine for WordPress plugin for WordPress is vulnerable to authorization bypass via the 'manage_admin_requests' function in all versions up to, and including, 1.0.20.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00578 Published 2026-04-22 No fix listed CWE-862

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0