EUVD-2026-105819

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM component: Email Marketing. Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successf...

EUVD-2026-105818

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM component: Email Marketing. Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successf...

EUVD-2026-105824

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM component: Email Marketing. Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful...

CVE-2026-101408

A vulnerability exists in the Email Marketing component of Oracle Siebel CRM (Siebel Apps - Marketing) affecting versions 17.0-26.9 . This easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation requires h...

CVE-2026-101402

A vulnerability exists in the Email Marketing component of the Oracle Siebel CRM (Siebel Apps - Marketing) product, affecting supported versions 17.0-26.9 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the application. Successf...

CVE-2026-101403

A vulnerability exists in the Siebel Apps - Marketing product of Oracle Siebel CRM within the Email Marketing component (affected versions 17.0-26.9 ). An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability, though it requires human interactio...

CVE-2026-97396

The Email Marketing for WordPress and WooCommerce – Retainful plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and including, 1.0.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticate...

CVE-2026-97396

The Email Marketing for WordPress and WooCommerce – Retainful plugin is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 1.0.10 . The flaw originates from insufficient input sanitization and output escaping within the 'data' parameter of the /updateOptions REST ...

EUVD-2026-96280

The Email Marketing for WordPress and WooCommerce – Retainful plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and including, 1.0.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticate...

CVE-2026-97396 Email Marketing for WordPress and WooCommerce <= 1.0.10 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'data' Parameter to /updateOptions REST Endpoint

The Email Marketing for WordPress and WooCommerce – Retainful plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and including, 1.0.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticate...

CVE-2026-97396: Improper Neutralization of Input During Web Page Generation

The Email Marketing for WordPress and WooCommerce – Retainful plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and including, 1.0.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticate...

WordPress Email Marketing for WordPress and WooCommerce – Retainful plugin <= 1.0.10 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Trithem in WordPress Plugin Email Marketing for WordPress and WooCommerce – Retainful versions = 1.0.10...

CVE-2026-39791

Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing = 6.2.3 versions...

CVE-2026-39791 WordPress Mailjet Email Marketing plugin <= 6.2.3 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing = 6.2.3 versions...

CVE-2026-39791

The Mailjet Email Marketing plugin for WordPress (versions

CVE-2026-39791 WordPress Mailjet Email Marketing plugin <= 6.2.3 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing = 6.2.3 versions...

EUVD-2026-93035

Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing = 6.2.3 versions...

PT-2026-106457

Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing = 6.2.3 versions...

CVE-2026-39791: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing = 6.2.3 versions...

WordPress Mailjet Email Marketing plugin <= 6.2.3 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Mailjet Email Marketing versions = 6.2.3...