Sendy / Sendy

2 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2025-68564	WordPress Sendy plugin <= 3.4.2 - Broken Access Control vulnerability	MEDIUM	6.5	Feb 20, 2026
CVE-2014-100012	SQL injection vulnerability in /app in Sendy 1.1.8.4 allows remote attackers to execute arbitrary SQL commands via the i parameter.	HIGH	7.5	Jan 13, 2015
CVE-2014-100011	SQL injection vulnerability in /send-to in Sendy 1.1.9.1 allows remote attackers to execute arbitrary SQL commands via the c parameter.	HIGH	7.5	Jan 13, 2015

Rows per page

Showing 1 to 2 of 2 CVEs