VYPR

Sendmachine for WordPress

by Sendmachine

CVEs (1)

  • CVE-2026-6235CriApr 22, 2026
    risk 0.64cvss 9.8epss 0.01

    The Sendmachine for WordPress plugin for WordPress is vulnerable to authorization bypass via the 'manage_admin_requests' function in all versions up to, and including, 1.0.20. This is due to the plugin not properly verifying that a user is authorized to perform an action. This…