SendPulse Email Marketing Newsletter

SendPulse Email Marketing Newsletter has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 4 are fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (75%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor.

Every one of the 4 issues recorded for SendPulse Email Marketing Newsletter has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, one record each. SendPulse Email Marketing Newsletter is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

4

Get automatic notifications for all SendPulse Email Marketing Newsletter vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2026-13362

SendPulse Email Marketing Newsletter <= 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via _sp_form_code Post Meta

Read the full analysis

Vulnerability Records

4 records
SendPulse Email Marketing Newsletter banner
Latestv2.2.7

SendPulse Email Marketing Newsletter

SendPulse

Author

SendPulse

2.6(8)
52/100
Last Updated
2026-09-03 (10d ago)
Active Installs
1,000+
Downloads
38,240
Requires WP
5.7+
Requires PHP
8.0+
Tested up to
WP 7.0.4
Created
2017-03-14 (10y ago)

SendPulse plugin for WordPress Add an email subscription form to your site. Each new subscriber will be automatically added to your mailing list. Create and send email campaigns with SendPulse, a multi-channel marketing automation platform. FEATURES Install the plugin in 1 click and set up within minutes; Add multiple email subscription forms; Customize your subscription forms to fit your brand identity; Import contacts from WordPress to your mailing list. SENDPULSE’S KEY FEATURES Rich automation possibilities that allow you to create email, SMS, web push, and chatbot campaigns on one platform; Drag and drop email editor; Ready-made email templates; Email personalization and list segmentation; Detailed analytics and reports; WHAT IS SENDPULSE? SendPulse is a multi-channel marketing automation platform for multifaceted business promotion and customer retention. SendPulse allows you to send email, SMS, and web push campaigns, stay in touch with clients using Telegram, Facebook Messenger, WhatsApp, and Instagram chatbots, and create landing pages in just 15 minutes. You can easily track all of your marketing activities and gather customer data with SendPulse’s free CRM. Create a SendPulse account, and send up to 15,000 emails every month for free. You can install SendPulse Free WebPush plugin if you need a plugin for web push notifications. Contacts Customer support – https://sendpulse.com/support Twitter – https://twitter.com/SendPulseCom Facebook – https://facebook.com/sendpulse Usage Create a subscription form using SendPulse’s builder. Add a new SendPulse form using WordPress. Paste your subscription form code in the editor. To display your subscription form, use a shortcode (for example [sendpulse-form id="..."] where “…” is form id) in editor or place <?php echo do_shortcode('[sendpulse-form id="..."]')?> in your themes file. Requirement PHP version >= 8.0+ (Recommended >= 8.0+)

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C