GetResponse for WordPress

GetResponse for WordPress has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2024; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 7.2, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Cross-Site Request Forgery (CSRF).

2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2024.

3 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSHigh

7.2/ 10

Patch Coverage67%

Open

Fixed

Get automatic notifications for all GetResponse for WordPress vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2024-31104

GetResponse for WordPress <= 5.5.35 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records


2024-03-29 00:00	GetResponse for WordPress <= 5.5.35 - Authenticated (Contributor+) Stored Cross-Site Scripting GetResponse for WordPress <= 5.5.35	`CVE-2024-31104`	6.4 Medium	Ngô Thiên An (ancorn_)	No
2023-01-25 00:00	GetResponse for WordPress <= 5.5.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode GetResponse for WordPress <= 5.5.31	`CVE-2023-0167`	6.4 Medium	István Márton	Yes
2022-09-01 00:00	GetResponse <= 5.5.19 - Cross-Site Request Forgery GetResponse for WordPress <= 5.5.19	`CVE-2022-35277`	8.8 High	Rasi Afeef	Yes

Showing 1–3 of 3 reports