Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: mailerpress Clear all filters
TI-2026-15150 CVE-2026-18436 · GHSA-vfgx-g9m5-wfgv

MailerPress <= 1.5.0 - Missing Authorization to Unauthenticated Arbitrary Modification via REST API Endpoint

Priority LOW 30

The MailPress plugin for WordPress is vulnerable to unauthorized access in versions up to, and including, 1.5.0 via the campaign revision-restore REST endpoint (POST /wp-json/mailpress/v1/campaign/<id>/restore-revision/<…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0039 Published 2026-07-31 No fix listed CWE-862
TI-2026-15151 CVE-2026-18437 · GHSA-gjcp-gv56-hccw

MailPress <= 1.5.0 - Missing Authorization to Unauthenticated Contact Updates

Priority LOW 30

The MailerPress – Newsletter, email marketing & AI automation plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the `mailerpress/v1/contact` endpoint in all versions up to, an…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0039 Published 2026-07-31 No fix listed CWE-862
TI-2026-07557 CVE-2026-8599 · GHSA-9jw9-xmq5-9839

MailerPress <= 2.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via Campaign HTML Content Field

Priority LOW 28

The MailerPress – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Campaign HTML Content Field in all versions up to, and including,…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00234 Published 2026-06-09 No fix listed CWE-79