Mailerpress Email Marketing Newsletter Email Automation Woocommerce Emails
Monthly
Stored cross-site scripting in the MailerPress WordPress plugin (versions up to 2.0.4) allows authenticated attackers with author-level access or higher to inject arbitrary web scripts via the Campaign HTML Content field. Exploitation is limited to the admin dashboard preview, as the public-facing campaign preview endpoint enforces a Content-Security-Policy blocking inline scripts. No active exploitation or public exploit code has been identified, and the EPSS score is low (0.06%).
Stored cross-site scripting in the MailerPress WordPress plugin (versions up to 2.0.4) allows authenticated attackers with author-level access or higher to inject arbitrary web scripts via the Campaign HTML Content field. Exploitation is limited to the admin dashboard preview, as the public-facing campaign preview endpoint enforces a Content-Security-Policy blocking inline scripts. No active exploitation or public exploit code has been identified, and the EPSS score is low (0.06%).