Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: brewlabs Clear all filters
TI-2026-82274 CVE-2026-93855 · GHSA-j32g-r42g-5gh6

Unauthenticated SQL injection in SendPress Newsletters plugin

Priority LOW 39

The SendPress Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the 'subscriberid' parameter in all versions up to, and including, 1.26.1.20 due to insufficient escaping on the user supplied…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00411 Published 2026-10-29 No fix listed CWE-89
TI-2026-67988 CVE-2026-39795 · GHSA-5339-cxjh-26j4

SQL injection in WordPress SendPress Newsletters plugin

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in brewlabs SendPress Newsletters sendpress allows Blind SQL Injection.This issue affects SendPress Newsletters: from n/a…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00302 Published 2026-10-06 No fix listed CWE-89
TI-2025-26281 CVE-2025-39539 · GHSA-pvf8-wvcr-7547

WordPress WP Email Delivery plugin <= 1.20.11.23 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brewlabs WP Email Delivery wp-email-delivery allows Reflected XSS.This issue affects WP Email Delivery: from n/a throu…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00288 Published 2025-06-09 No fix listed CWE-79