Approved changes feed: RSS · Atom

cpe:2.3:a:sender:sender_–_newsletter,_sms_and_email_marketing_automation_for_woocommerce:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSender (1864b1b1-6392-557e-8ca7-a9184e71f407)
ProductSender – Newsletter, Sms And Email Marketing Automation For Woocommerce (b2e04225-de50-5ad0-a0da-7db3bf339496)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-43126 vulnerable 2026-06-08 06:45:49.631366 WordPress Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce plugin <= 2.6.14 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Sender Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce allows Reflected XSS.This issue affects Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce: from n/a through 2.6.14.
Published: 2024-08-12T22:34:23.077Z
Updated: 2026-04-28T16:10:08.885Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39657 vulnerable 2026-06-08 06:41:51.293850 WordPress Sender plugin <= 2.6.18 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in Sender Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce.This issue affects Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce: from n/a through 2.6.18.
Published: 2024-08-26T20:54:08.948Z
Updated: 2026-04-28T16:10:07.824Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.