What’s Vulnerable › Products

Campaign Monitor for WordPress vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Campaign Monitor for WordPress version is affected

Latest Campaign Monitor for WordPress vulnerabilities

• CVE-2026-0674 — WordPress Campaign Monitor for WordPress plugin <= 2.9.1 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2024-6569 — Campaign Monitor for WordPress <= 2.8.15 - Unauthenticated Full Path Disclosure (CVSS 5.3)
• CVE-2023-38474 — WordPress Campaign Monitor for WordPress Plugin <= 2.8.12 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)