CVE-2026-42668 — WordPress Email Marketing for WooCommerce by Omnisend plugin <= 1.18.0 - Broken Authentication vulnerability

CVE-2026-42668

WordPress Email Marketing for WooCommerce by Omnisend plugin <= 1.18.0 - Broken Authentication vulnerability PUBLISHED

Description (CNA)

Unauthenticated Broken Authentication in Email Marketing for WooCommerce by Omnisend <= 1.18.0 versions.

Vendor / product	Versions
Omnisend / Email Marketing for WooCommerce by Omnisend	affected n/a through 1.18.0

CWE-288

CISA-ADP

No English description supplied.

No references supplied.