Skip to content
OpenAdvisories

Vendor

Omnisend

5 known vulnerabilities.

Products

Email Marketing for WooCommerce by Omnisend 4 Newsletters, Email Marketing, SMS and Popups by Omnisend 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-97074

    WordPress Newsletters, Email Marketing, SMS and Popups by Omnisend plugin <= 1.9.0 - Insecure Direct Object References (IDOR) vulnerability

    Subscriber Insecure Direct Object References (IDOR) in Newsletters, Email Marketing, SMS and Popups by Omnisend <= 1.9.0 versions.

    Omnisend Newsletters, Email Marketing, SMS and Popups by Omnisend
  • Medium 5.4
    CVE-2026-57632

    WordPress Email Marketing for WooCommerce by Omnisend plugin <= 1.19.0 - Broken Access Control vulnerability

    Subscriber Broken Access Control in Email Marketing for WooCommerce by Omnisend <= 1.19.0 versions.

    Omnisend Email Marketing for WooCommerce by Omnisend Web / CMS
  • Medium 4.3
    CVE-2024-32101

    WordPress Email Marketing for WooCommerce plugin <= 1.14.3 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Omnisend Email Marketing for WooCommerce by Omnisend omnisend-connect.This issue affects Email Marketing for WooCommerce by Omnisend: from n/a through <= 1.14.3.

    Omnisend Email Marketing for WooCommerce by Omnisend Web / CMS
  • Medium 5.3
    CVE-2023-47244

    WordPress Email Marketing for WooCommerce by Omnisend Plugin <= 1.13.8 is vulnerable to Sensitive Data Exposure

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Omnisend Email Marketing for WooCommerce by Omnisend.This issue affects Email Marketing for WooCommerce by Omnisend: from n/a through 1.13.8.

    Omnisend Email Marketing for WooCommerce by Omnisend Web / CMS