SendPulse Email Marketing Newsletter
SendPulse Email Marketing Newsletter has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 4 are fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 3 disclosures.
The most common weakness is Cross-Site Scripting, behind 3 of the records (75%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor.
Every one of the 4 issues recorded for SendPulse Email Marketing Newsletter has a vendor fix available, so running the current release closes all known holes.
4 independent researchers contributed these findings, one record each. SendPulse Email Marketing Newsletter is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2026-13362SendPulse Email Marketing Newsletter <= 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via _sp_form_code Post Meta
Read the full analysisVulnerability Records

SendPulse Email Marketing Newsletter
Author
SendPulse
SendPulse plugin for WordPress Add an email subscription form to your site. Each new subscriber will be automatically added to your mailing list. Create and send email campaigns with SendPulse, a multi-channel marketing automation platform. FEATURES Install the plugin in 1 click and set up within minutes; Add multiple email subscription forms; Customize your subscription forms to fit your brand identity; Import contacts from WordPress to your mailing list. SENDPULSE’S KEY FEATURES Rich automation possibilities that allow you to create email, SMS, web push, and chatbot campaigns on one platform; Drag and drop email editor; Ready-made email templates; Email personalization and list segmentation; Detailed analytics and reports; WHAT IS SENDPULSE? SendPulse is a multi-channel marketing automation platform for multifaceted business promotion and customer retention. SendPulse allows you to send email, SMS, and web push campaigns, stay in touch with clients using Telegram, Facebook Messenger, WhatsApp, and Instagram chatbots, and create landing pages in just 15 minutes. You can easily track all of your marketing activities and gather customer data with SendPulse’s free CRM. Create a SendPulse account, and send up to 15,000 emails every month for free. You can install SendPulse Free WebPush plugin if you need a plugin for web push notifications. Contacts Customer support – https://sendpulse.com/support Twitter – https://twitter.com/SendPulseCom Facebook – https://facebook.com/sendpulse Usage Create a subscription form using SendPulse’s builder. Add a new SendPulse form using WordPress. Paste your subscription form code in the editor. To display your subscription form, use a shortcode (for example [sendpulse-form id="..."] where “…” is form id) in editor or place <?php echo do_shortcode('[sendpulse-form id="..."]')?> in your themes file. Requirement PHP version >= 8.0+ (Recommended >= 8.0+)
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C