What’s Vulnerable › Products

SendPulse Free Web Push vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your SendPulse Free Web Push version is affected

Latest SendPulse Free Web Push vulnerabilities

• CVE-2024-9184 — SendPulse Free Web Push <= 1.3.6 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2)
• CVE-2023-45274 — WordPress SendPulse Free Web Push Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)