SendPulse

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

SendPulse records in CISA KEV

No SendPulse vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Free Web Push · all components

TI-2023-24264 CVE-2023-45274 · GHSA-wc9v-c62x-353g

MEDIUM 40

Cross-Site Request Forgery (CSRF) vulnerability in SendPulse SendPulse Free Web Push plugin <= 1.3.1 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00259 Published 2023-10-16 No fix listed CWE-352