VYPR

MailerUp

by Maalfer

CVEs (1)

  • CVE-2026-13164Jun 24, 2026
    risk 0.00cvss epss

    Missing Authentication for Critical Function (CWE-306) in the RegisterView (apps/accounts/views.py), exposed at POST /api/auth/register/, in MailerUp <1.0.1 allows a remote, unauthenticated attacker to self-register a working account on instances where registration is intended…