Skip to content
OpenAdvisories

Vendor

retainful

1 known vulnerabilities.

Products

Email Marketing for WordPress and WooCommerce – Retainful 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2026-97396

    Email Marketing for WordPress and WooCommerce <= 1.0.10 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'data' Parameter to /updateOptions REST Endpoint

    The Email Marketing for WordPress and WooCommerce – Retainful plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and including, 1.0.10 due to insufficient input sanitization and output escaping. T…

    retainful Email Marketing for WordPress and WooCommerce – Retainful Web / CMS