CRITICAL
brewlabs
CVE published 2026-10-06
CVE-2026-39795
A critical SQL injection vulnerability exists in the SendPress Newsletters plugin, affecting versions from n/a through 1.26.1.20. This issue allows for Blind SQL Injection, posing a significant risk to affected systems. The vulnerability has a CVSS score of 9.3 and a severity rating of CRITICAL. Defenders and administrators responsible for systems using the SendPress Newsletters plugin should assess expos [truncated]