Vulnerabilities

TI-2026-00467 CVE-2026-0674 · GHSA-57g6-cvq3-mxgp

WordPress Campaign Monitor for WordPress plugin <= 2.9.1 - Broken Access Control vulnerability

LOW 19

Missing Authorization vulnerability in Campaign Monitor Campaign Monitor for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0022 Published 2026-01-08 No fix listed CWE-862

TI-2023-19854 CVE-2023-38474 · GHSA-w6gf-7vvp-94w7

WordPress Campaign Monitor for WordPress Plugin <= 2.8.12 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Campaign Monitor Campaign Monitor for WordPress allows Reflected XSS.This issue affects Campaign Monitor for WordPress…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00412 Published 2023-11-30 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Campaign Monitor for WordPress plugin <= 2.9.1 - Broken Access Control vulnerability

WordPress Campaign Monitor for WordPress Plugin <= 2.8.12 is vulnerable to Cross Site Scripting (XSS)