sendpress

Security Risk Profile

/100

medium

Security Risk Score

Comprehensive risk assessment based on 6 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from April 8, 2024 to present

Total CVEs

Critical+High

Exploited

Unpatched

Threat Assessment

Avg CVSS

Base severity

Avg EPSS

Exploit probability

Unpatched

Critical/High

Risk Level

47/100

medium

🆕 3Fresh (<7d)📈 3 in Last 30 Days

Severity Distribution

Critical

High

Medium

Low

Exploit Likelihood

>50% chance

20-50%

5-20%

<5%

Age Distribution

Common Weaknesses (CWE)

XSS

Infoleak

SQL Injection

Most Affected Products

1. SendPress SendPress Newsletters4

2. Pressified Sendpress Wordpress3

3. SendPress Newsletters2

4. WordPress SendPress Newsletters1

Recent Vulnerabilities

See more →

CVE-2026-92989

unknown

SendPress Newsletters <= 1.26.1.20 - Subscriber+ Mailing List Sync and Newsletter Queueing

Oct 9, 2026🔧 No Patch

CVE-2026-92990

unknown

SendPress <= 1.26.1.20 - Unauthenticated Newsletter Sending Log Disclosure via Hardcoded Token

Oct 9, 2026🔧 No Patch

CVE-2026-39795

CVSS 9.3critical

WordPress SendPress Newsletters plugin <= 1.26.1.20 - SQL Injection vulnerability

Oct 6, 2026🔧 No Patch

CVE-2023-35040

CVSS 9.8critical

WordPress SendPress Newsletters plugin <= 1.26.1.20 - Broken Access Control vulnerability

Jun 13, 2024🔧 No Patch

CVE-2024-1589

CVSS 6.1medium

SendPress Newsletters <= 1.23.11.6 - Admin+ Stored XSS via Form Settings

Apr 8, 2024🔧 No Patch

CVE-2024-1588

CVSS 6.8medium

SendPress Newsletters <= 1.23.11.6 - Admin+ Stored XSS via Settings