Description
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SendPress Newsletters plugin <= 1.22.3.31 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SendPress | SendPress Newsletters | ≤ 1.22.3.31 | — |
Medium · 5.9
CVE-2023-41729
EUVD-2023-46221GHSA-gp9r-vr9f-2vw7
WordPress SendPress Newsletters Plugin <= 1.22.3.31 is vulnerable to Cross Site Scripting (XSS)
Published Oct 2, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack