Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: hostinger Clear all filters
TI-2026-02141 CVE-2026-2515

Hostinger Reach <= 1.3.8 - Missing Authorization to Authenticated (Subscriber+) Integration API Key Update

Priority LOW 24

The Hostinger Reach – AI-Powered Email Marketing for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'handle_ajax_action' function in all version…

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00378 Published 2026-05-13 No fix listed CWE-862
TI-2023-06170 CVE-2023-6751 · GHSA-jjrq-h892-h3gx

Hostinger <= 1.9.7 - Missing Authorization to Maintenance Mode Activation

Priority LOW 32

The Hostinger plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the function publish_website in all versions up to, and including, 1.9.7.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00449 Published 2024-01-11 No fix listed CWE-862