https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T19:28:48.007627+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-92990 CVE-2026-92990 — SendPress <= 1.26.1.20 - Unauthenticated Newsletter Sending Log Disclosure via Hardcoded Token 2026-10-09T19:28:48.023609+00:00

Affected: Unknown SendPress Newsletters

The SendPress Newsletters WordPress plugin through 1.26.1.20 protects a logging endpoint with a hardcoded token that is the same on every site rather than a per-site secret, allowing unauthenticated users to read newsletter sending logs, including recipient email addresses.