Brewlabs vulnerabilities
We track 4 vulnerabilities in Brewlabs products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 29, 2026.
Latest Brewlabs vulnerabilities
- 7.5 High severity
SendPress Newsletters: Improper Neutralization of Special Elements used in an SQL Command
The SendPress Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the 'subscriberid' parameter in all versions up to, and including, 1.26.1.20 due to insufficient escaping on the user supplied parameter and lack of sufficient prepara
- 9.3 Critical severity
SendPress Newsletters: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in brewlabs SendPress Newsletters sendpress allows Blind SQL Injection.This issue affects SendPress Newsletters: from n/a through 1.26.1.20.
- 9.8 Critical severity
SensorPress: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brewlabs SensorPress allows Stored XSS. This issue affects SensorPress: from n/a through 1.0.
- 7.1 High severity
WP Email Delivery: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brewlabs WP Email Delivery wp-email-delivery allows Reflected XSS.This issue affects WP Email Delivery: from n/a through <= 1.20.11.23.