Description
Cross-Site Request Forgery (CSRF) vulnerability in SendPulse SendPulse Free Web Push plugin <= 1.3.1 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SendPulse | SendPulse Free Web Push | ≤ 1.3.1 | — |
Medium · 4.3
CVE-2023-45274
EUVD-2023-49580GHSA-wc9v-c62x-353g
WordPress SendPulse Free Web Push Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)
Published Oct 16, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack