VYPR

Hostinger Reach

by WordPress

CVEs (1)

  • CVE-2026-2515MedMay 13, 2026
    risk 0.27cvss 5.3epss 0.00

    The Hostinger Reach – AI-Powered Email Marketing for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'handle_ajax_action' function in all versions up to, and including, 1.3.8. This makes it possible for…