Skip to content
OpenAdvisories

Vendor

sendpulse

6 known vulnerabilities.

Products

SendPulse Email Marketing Newsletter 4 SendPulse Free Web Push 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2024-9184

    SendPulse Free Web Push <= 1.3.6 - Unauthenticated Stored Cross-Site Scripting

    The SendPulse Free Web Push plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.3.6 due to incorrect use of the wp_kses_allowed_html function. This makes it possible for unauthenticated attackers to inject…

    sendpulse SendPulse Free Web Push Web / CMS