SendPress Newsletters vulnerabilities

2 known vulnerabilities in SendPress Newsletters from Brewlabs. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  SendPress Newsletters: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-93855Oct 29, 2026Brewlabs

  The SendPress Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the 'subscriberid' parameter in all versions up to, and including, 1.26.1.20 due to insufficient escaping on the user supplied parameter and lack of sufficient prepara

• 9.3 Critical severity

  SendPress Newsletters: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-39795Oct 6, 2026Brewlabs

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in brewlabs SendPress Newsletters sendpress allows Blind SQL Injection.This issue affects SendPress Newsletters: from n/a through 1.26.1.20.