5.3
Moyenne
CVE-2026-92990 The SendPress Newsletters WordPress plugin through 1.26.1.20 protects a logging endpoint with a hardcoded token that…
Description
The SendPress Newsletters WordPress plugin through 1.26.1.20 protects a logging endpoint with a hardcoded token that is the same on every site rather than a per-site secret, allowing unauthenticated users to read newsletter sending logs, including recipient email addresses.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SendPress Newsletters 1.26 | premières → 1.26.1.20 | Pas de correctif indiqué |
Autres CVE de SendPress Newsletters
Les 4 CVE de SendPress Newsletters →
CVE-2026-92989
The SendPress Newsletters WordPress plugin through 1.26.1.20 does not check the user's capability on several…
4.3
Moyenne
CVE-2024-1588
The SendPress Newsletters WordPress plugin through 1.23.11.6 does not sanitise and escape some of its settings, which…
6.8
Moyenne
CVE-2024-1589
The SendPress Newsletters WordPress plugin through 1.23.11.6 does not sanitise and escape some of its settings, which…
6.1
Moyenne