Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-67948 2 Sendpulse, Wordpress 2 Sendpulse Email Marketing Newsletter, Wordpress 2025-12-16 4.3 Medium
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in SendPulse SendPulse Email Marketing Newsletter sendpulse-email-marketing-newsletter allows Retrieve Embedded Sensitive Data.This issue affects SendPulse Email Marketing Newsletter: from n/a through <= 2.2.1.
CVE-2025-47547 1 Sendpulse 1 Sendpulse Email Marketing Newsletter 2025-05-12 6.5 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SendPulse SendPulse Email Marketing Newsletter allows Stored XSS. This issue affects SendPulse Email Marketing Newsletter: from n/a through 2.1.6.