Approved changes feed: RSS · Atom

cpe:2.3:a:sendpress:sendpress_newsletters:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSendpress (6cc40469-6616-54aa-8887-d780ceaafc67)
ProductSendpress Newsletters (ee6f7710-e662-5d89-960c-c9924e64dccb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/brewlabs/sendpress purl2cpe 2026-06-01 10:11:31.567420
pkg:github/wp-plugins/sendpress purl2cpe 2026-06-01 10:11:31.567421

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-47517 vulnerable 2026-06-08 06:14:24.797417 WordPress SendPress Newsletters Plugin <= 1.23.11.6 is vulnerable to Cross Site Scripting (XSS)
HIGH (7.1)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in SendPress Newsletters plugin <= 1.23.11.6 versions.
Published: 2023-11-14T22:17:19.597Z
Updated: 2026-04-28T16:08:49.556Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41730 vulnerable 2026-06-08 06:11:06.819678 WordPress SendPress Newsletters Plugin <= 1.22.3.31 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in SendPress Newsletters plugin <= 1.22.3.31 versions.
Published: 2023-10-10T07:47:10.885Z
Updated: 2026-04-28T16:08:38.659Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41729 vulnerable 2026-06-08 06:11:06.817086 WordPress SendPress Newsletters Plugin <= 1.22.3.31 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (5.9)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SendPress Newsletters plugin <= 1.22.3.31 versions.
Published: 2023-10-02T07:39:34.189Z
Updated: 2026-04-28T16:08:38.498Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35040 vulnerable 2026-06-08 06:06:26.430726 WordPress SendPress Newsletters plugin <= 1.23.11.6 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in SendPress SendPress Newsletters.This issue affects SendPress Newsletters: from n/a through 1.23.11.6.
Published: 2024-06-13T23:51:45.497Z
Updated: 2026-04-28T16:08:29.197Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.