What is GHSA-wv2c-2j47-6v9w?

GHSA-wv2c-2j47-6v9w is a security advisory published by GitHub Security Advisories with Medium severity. The SendPress Newsletters WordPress plugin through 1.26.1.20 protects a logging endpoint with a...

Which CVE IDs does GHSA-wv2c-2j47-6v9w cover?

GHSA-wv2c-2j47-6v9w covers the following CVE IDs: CVE-2026-92990. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-wv2c-2j47-6v9w?

GHSA-wv2c-2j47-6v9w has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-wv2c-2j47-6v9wMediumCVSS 5.3

The SendPress Newsletters WordPress plugin through 1.26.1.20 protects a logging endpoint with a...

Vendor

GitHub Security Advisories

Published

October 9, 2026

Last Modified

October 9, 2026

🔗 CVE IDs covered (1)

CVE-2026-92990 →

📋 Description

The SendPress Newsletters WordPress plugin through 1.26.1.20 protects a logging endpoint with a hardcoded token that is the same on every site rather than a per-site secret, allowing unauthenticated users to read newsletter sending logs, including recipient email addresses.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-92990
https://wpscan.com/vulnerability/595c6a6b-d346-4ed4-9a4e-674d90a35e74
https://github.com/advisories/GHSA-wv2c-2j47-6v9w