中文

// CVE · PUBLISHED 2026-10-06

CVE-2026-39795

brewlabs / SendPress Newsletters

9.3 · CVSS 3.1Critical

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in brewlabs SendPress Newsletters sendpress allows Blind SQL Injection.This issue affects SendPress Newsletters: from n/a through 1.26.1.20.

References

Related CVEs

  • CVE-2026-42417reputeinfosystems / ARMember PremiumCVSS 9.3
  • CVE-2026-42415p-themes / Porto Theme - FunctionalityCVSS 9.3
  • CVE-2026-41555Weblizar – WordPress Themes & Plugin / Newsletter Subscription Form – User Subscriptions Form, Capture EmailCVSS 9.3
  • CVE-2026-39797Data443 Risk Mitigation, Inc. / GDPR Framework By Data443CVSS 9.8
  • CVE-2026-39785Serhii Pasyuk / Gmedia Photo GalleryCVSS 9.3
  • CVE-2026-39773AmentoTech / Doctreat CoreCVSS 10.0
  • CVE-2026-39770AmentoTech / DoctreatCVSS 10.0
  • CVE-2026-39764RadiusTheme / Radius Booking — Booking Calendar for Appointments & ServicesCVSS 9.3

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.