Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Sender Clear all filters
TI-2026-85064 CVE-2026-119745 · GHSA-78vr-8fpj-r56x

Missing authorization in Sender WordPress plugin exposes debug data

Priority LOW 23

Sender plugin for WordPress before 2.11.3 contains a missing authorization vulnerability that allows any authenticated user, including Subscribers, to access a sensitive diagnostic dump by requesting the admin_post_sende…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00229 Published 2026-11-04 Fixed in 2.11.3 CWE-862
TI-2024-26581 CVE-2024-39657 · GHSA-6q42-8j33-m2fc

WordPress Sender plugin <= 2.6.18 - Cross Site Request Forgery (CSRF) vulnerability

Priority LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in Sender Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce.This issue affects Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00196 Published 2024-08-26 No fix listed CWE-352