EUVD-2026-41248

The Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.9.27. This is due to the plugin not properly verifying that a user is authorized to perfor...

CVE-2021-24345

The page lists-management feature of the Sendit WP Newsletter WordPress plugin through 2.5.1, available to Administrator users does not sanitise, validate or escape the idlista POST parameter before using it in SQL statement, therefore leading to Blind SQL Injection...

PT-2021-15881

Name of the Vulnerable Software and Affected Versions Sendit WP Newsletter WordPress plugin versions 2.5.1 and earlier Description The issue concerns the page lists-management feature of the plugin, which is accessible to Administrator users. It does not properly sanitise, validate, or escape the...

CVE-2021-24345: Improper Neutralization of Special Elements used in an SQL Command

The page lists-management feature of the Sendit WP Newsletter WordPress plugin through 2.5.1, available to Administrator users does not sanitise, validate or escape the idlista POST parameter before using it in SQL statement, therefore leading to Blind SQL Injection...