← CVE Intelligence

CVE-2026-97074

WordPress Newsletters, Email Marketing, SMS and Popups by Omnisend plugin <= 1.9.0 - Insecure Direct Object References (IDOR) vulnerability PUBLISHED

Description (CNA)

Subscriber Insecure Direct Object References (IDOR) in Newsletters, Email Marketing, SMS and Popups by Omnisend <= 1.9.0 versions.

Affected (CNA)

Vendor / productVersions
Omnisend / Newsletters, Email Marketing, SMS and Popups by Omnisendaffected n/a through 1.9.0

CWE

CWE-639

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.