Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-39795 EUVD-2026-93039GHSA-5339-cxjh-26j4

WordPress SendPress Newsletters plugin <= 1.26.1.20 - SQL Injection vulnerability

Published Oct 6, 2026 · Updated Oct 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in brewlabs SendPress Newsletters sendpress allows Blind SQL Injection.This issue affects SendPress Newsletters: from n/a through 1.26.1.20.

Affected products

VendorProductAffectedFixed
brewlabs SendPress Newsletters ≤ 1.26.1.20 —

References