CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

64 matches found

NVD•added 2026/08/01 3:16 a.m.•20 views

CVE-2026-13362

The SendPulse Email Marketing Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via spformcode Post Meta in all versions up to, and including, 2.2.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS0.00348EPSS

SaveExploits0References3

Cvelist•added 2026/08/01 1:29 a.m.•53 views

CVE-2026-13362 SendPulse Email Marketing Newsletter <= 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via _sp_form_code Post Meta

6.4CVSS0.00348EPSS

SaveExploits0References3

Vulnrichment•added 2026/08/01 1:29 a.m.•10 views

CVE-2026-13362 SendPulse Email Marketing Newsletter <= 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via _sp_form_code Post Meta

6.4CVSS6AI score0.00348EPSS

SaveExploits0References3

EUVD•added 2026/08/01 1:29 a.m.•21 views

EUVD-2026-51688

6.4CVSS5.7AI score0.00348EPSS

SaveExploits0References3

CVE•added 2026/08/01 1:29 a.m.•47 views

CVE-2026-13362

Technical details about CVE-2026-13362 are not publicly available in the provided documents. Monitor for updates; no concrete exploit vectors, affected versions, or remediation are confirmed here.

6.4CVSS6AI score0.00348EPSS

SaveExploits0References3

attackerkb•added 2026/08/01 1:29 a.m.•18 views

CVE-2026-13362

6.4CVSS5.7AI score0.00348EPSS

SaveExploits0References4

Rapid7 Vulnerability Database (full)•added 2026/08/01 12:00 a.m.•3 views

CVE-2026-13362: Improper Neutralization of Input During Web Page Generation

6.4CVSS6AI score0.00348EPSS

SaveExploits0References2

Positive Technologies•added 2026/08/01 12:00 a.m.•30 views

PT-2026-66891

Name of the Vulnerable Software and Affected Versions SendPulse Email Marketing Newsletter versions prior to 2.2.6 Description Insufficient input sanitization and output escaping allow authenticated attackers with contributor-level access or higher to perform Stored Cross-Site Scripting XSS. An...

6.4CVSS6.2AI score0.00348EPSS

SaveExploits0References7

Patchstack•added 2026/07/31 12:12 p.m.•11 views

WordPress SendPulse Email Marketing Newsletter plugin <= 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin SendPulse Email Marketing Newsletter versions = 2.2.5...

6.4CVSS5.4AI score0.00348EPSS

SaveExploits0References1Affected Software1

RedhatCVE•added 2026/01/09 9:28 a.m.•19 views

CVE-2023-45274

Cross-Site Request Forgery CSRF vulnerability in SendPulse SendPulse Free Web Push plugin = 1.3.1 versions...

8.8CVSS7.1AI score0.00214EPSS

SaveExploits0References1

RedhatCVE•added 2025/12/17 10:03 a.m.•23 views

CVE-2025-67948

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in SendPulse SendPulse Email Marketing Newsletter sendpulse-email-marketing-newsletter allows Retrieve Embedded Sensitive Data.This issue affects SendPulse Email Marketing Newsletter: from n/a through = 2.2.1...

4.3CVSS6.9AI score0.00255EPSS

SaveExploits0References1

EUVD•added 2025/12/16 9:31 a.m.•17 views

EUVD-2025-203565

4.3CVSS6.4AI score0.00255EPSS

SaveExploits0References2

NVD•added 2025/12/16 9:15 a.m.•11 views

CVE-2025-67948

4.3CVSS0.00255EPSS

SaveExploits0References1

Cvelist•added 2025/12/16 8:12 a.m.•38 views

CVE-2025-67948 WordPress SendPulse Email Marketing Newsletter plugin <= 2.2.1 - Sensitive Data Exposure vulnerability

4.3CVSS0.00255EPSS

SaveExploits0References1

Vulnrichment•added 2025/12/16 8:12 a.m.•6 views

CVE-2025-67948 WordPress SendPulse Email Marketing Newsletter plugin <= 2.2.1 - Sensitive Data Exposure vulnerability

5.8AI score0.00255EPSS

SaveExploits0References1

CVE•added 2025/12/16 8:12 a.m.•28 views

CVE-2025-67948

CVE-2025-67948 is a WordPress plugin issue in SendPulse Email Marketing Newsletter (plugin

4.3CVSS5.8AI score0.00255EPSS

SaveExploits0References1

CNNVD•added 2025/12/16 12:00 a.m.•13 views

WordPress plugin SendPulse Email Marketing Newsletter 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS5.8AI score0.00255EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2025/12/16 12:00 a.m.•3 views

CVE-2025-67948: Exposure of Sensitive System Information to an Unauthorized Control Sphere

4.3CVSS5.8AI score0.00255EPSS

SaveExploits0References1

Positive Technologies•added 2025/12/16 12:00 a.m.•15 views

PT-2025-51433

Name of the Vulnerable Software and Affected Versions SendPulse Email Marketing Newsletter versions n/a through 2.2.1 Description A flaw exists in SendPulse Email Marketing Newsletter that could allow unauthorized retrieval of sensitive data. The issue involves the exposure of sensitive system...

4.3CVSS6.1AI score0.00255EPSS

SaveExploits0References3

Patchstack•added 2025/12/05 7:38 p.m.•18 views

WordPress SendPulse Email Marketing Newsletter plugin <= 2.2.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Nabil Irawan in WordPress Plugin SendPulse Email Marketing Newsletter versions = 2.2.1...

4.3CVSS7AI score0.00255EPSS

SaveExploits0Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by