Vulnerabilities

TI-2025-42085 CVE-2025-68564 · GHSA-rm7g-73m3-759p

WordPress Sendy plugin <= 3.4.2 - Broken Access Control vulnerability

LOW 35

Missing Authorization vulnerability in sendy Sendy sendy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sendy: from n/a through <= 3.4.2.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00273 Published 2026-02-20 No fix listed CWE-862

TI-2014-08276 CVE-2014-100012 · GHSA-gf28-g4g6-24mg

SQL injection vulnerability in /app in Sendy 1.1.8.4 allows remote attackers to execute…

LOW 35

SQL injection vulnerability in /app in Sendy 1.1.8.4 allows remote attackers to execute arbitrary SQL commands via the i parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01203 Published 2015-01-13 No fix listed CWE-89

TI-2014-08275 CVE-2014-100011 · GHSA-7p8m-6352-g3gr

SQL injection vulnerability in /send-to in Sendy 1.1.9.1 allows remote attackers to…

LOW 36

SQL injection vulnerability in /send-to in Sendy 1.1.9.1 allows remote attackers to execute arbitrary SQL commands via the c parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0132 Published 2015-01-13 No fix listed CWE-89

Vulnerabilities

Filters

WordPress Sendy plugin <= 3.4.2 - Broken Access Control vulnerability

SQL injection vulnerability in /app in Sendy 1.1.8.4 allows remote attackers to execute…

SQL injection vulnerability in /send-to in Sendy 1.1.9.1 allows remote attackers to…