SendPulse vulnerabilities
We track 1 vulnerability in SendPulse products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 17, 2024.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest SendPulse vulnerabilities
- 7.2 High severity
SendPulse Free Web Push: Improper Neutralization of Input During Web Page Generation
The SendPulse Free Web Push plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.3.6 due to incorrect use of the wp_kses_allowed_html function. This makes it possible for unauthenticated attackers to inject