Description
Unauthenticated Broken Authentication in Email Marketing for WooCommerce by Omnisend <= 1.18.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Omnisend | Email Marketing for WooCommerce by Omnisend | ≤ 1.18.0 | — |
High · 7.5
CVE-2026-42668
EUVD-2026-36833GHSA-7j8h-2p3w-mmhx
WordPress Email Marketing for WooCommerce by Omnisend plugin <= 1.18.0 - Broken Authentication vulnerability
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack