CVE-2026-93855 | brewlabs SendPress Newsletters Plugin up to 1.26.1.20 on WordPress Shortcode subscriberid sql injection (EUVD-2026-112587)

October 29, 2026 Yanac

A vulnerability categorized as critical has been discovered in brewlabs SendPress Newsletters Plugin up to 1.26.1.20 on WordPress. This affects an unknown function of the component Shortcode Handler. Such manipulation of the argument subscriberid leads to sql injection.

This vulnerability is uniquely identified as CVE-2026-93855. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More