SendPress Newsletters
SendPress Newsletters has 8 disclosed vulnerabilities in the WordSec catalog, reported between 2015 and 2023; 5 are fixed and 3 remain unpatched as of September 2026. Their average CVSS score is 6.0, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2023 was the busiest year with 5 disclosures.
The most common weakness is Cross-Site Scripting, behind 5 of the records (63%). Other recurring categories include Cross-Site Request Forgery (CSRF), Missing Authorization.
5 of the records (63%) have a vendor fix, while 3 remain unpatched. The oldest unresolved one dates back to 2023.
6 independent researchers contributed these findings, most of them (2) reported by Marcin Probola. SendPress Newsletters is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.
CVE-2023-35040SendPress Newsletters <= 1.23.11.6 - Missing Authorization
Read the full analysisVulnerability Records
SendPress Newsletters
Author
brewlabs
SendPress Newsletters is an easy to use WordPress newsletter plugin that has all the features you need. Create newsletter templates with your style and edit content just like you would a post in WordPress. Easily import post content from your site and schedule newsletters to be sent at the right time. Start sending great emails and newsletters today right from WordPress with our newsletter plugin. Newsletter Features Unlimited Subscribers Unlimited Responsive Newsletters with tracking Simple editor. With an code-free experience Customizable subscription widget, page or custom form Sync WordPress roles to newsletter subscriber lists Single And Double Opt-In Html and Text versions of Newsletters Customizable Newsletter Templates with easy to use theme styler Stat tracking for each email: clicks, opens and unsubscribes. Send with your web host or Gmail for free Verified compatible with: Postman SMTP Mailer/Email Log Scheduled Sending of newsletters Auto Cron We help make sure your newsletters are sent. You can enable Auto Cron from the admin panel and then our systems will check your site every 15 minutes to make sure your newsletters are sent. Check out our knowledge base article What is AutoCron? for more info. Check out our 2 minute run through video SendPress Newsletters Pro Features API Sending for Mandrill, Sendgrid, Mailgun and Elastic Email Automated Bounce handling Advanced report details ( see clicked links and subscriber details ) Custom HTML Templates use any newsletter template you want Campaign Tracking: Google Analytics, KissMetrics, etc… Check your spam score ( Spamassasin ) 1 Year of updates and Premium Support Support Please check out our Docs site http://docs.sendpress.com/ if you need help with anything or our WordPress Forum. Pro customers have direct access to our ticket system via Your Account page on SendPress.com. Follow SendPress Newsletters on GitHub
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C