newsletter_sms_and_email_marketing_automation_for_woocommerce vulnerabilities

CVEs whose affected-version data names the newsletter_sms_and_email_marketing_automation_for_woocommerce package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-119745Medium· 4.3

4d ago

Sender WordPress Plugin < 2.11.3 Broken Access Control via admin_post_sender_debug_download

Sender plugin for WordPress before 2.11.3 contains a missing authorization vulnerability that allows any authenticated user, including Subscribers, to access a sensitive diagnostic dump by requesting the admin_post_sender_debug_download …

▾ SunlitSender · Sender – Newsletter, SMS and Email Marketing Automation for WooCommerceEPSS 0.23%via CVEORG