Security Advisory

CVE-2026-18437

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-31 08:30:15

Last updated 2026-07-31 14:50:17

Assigner Wordfence

CVSS score not scored

State PUBLISHED

Description

The MailerPress – Newsletter, email marketing & AI automation plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the `mailerpress/v1/contact` endpoint in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated attackers to update contact details.

← Browse all CVEs View on cve.org ↗