Skip to content
OpenAdvisories
High · 7.6 CVE-2026-59537 EUVD-2026-49213GHSA-pmm5-pfg2-48pg

WordPress Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce plugin <= 2.10.22 - SQL Injection vulnerability

Published Jul 27, 2026 · Updated Jul 27, 2026 · Assigned by Patchstack

Vendor: Sender Product: Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce Category: Web / CMS

Description

Administrator SQL Injection in Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.10.22 versions.

Affected products

VendorProductAffectedFixed
Sender Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce ≤ 2.10.22 —

References