CVE-2023-47244
WordPress Email Marketing for WooCommerce by Omnisend Plugin <= 1.13.8 is vulnerable to Sensitive Data Exposure
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Omnisend Email Marketing for WooCommerce by Omnisend.This issue affects Email Marketing for WooCommerce by Omnisend: from n/a through 1.13.8.
| CWE | CWE-200 |
| Vendor | omnisend |
| Product | email marketing for woocommerce by omnisend |
| Published | Nov 23, 2023 |
| Last Updated | Apr 28, 2026 |
Stay Ahead of the Next One
Get instant alerts for omnisend email marketing for woocommerce by omnisend
Be the first to know when new medium vulnerabilities affecting omnisend email marketing for woocommerce by omnisend are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None
Affected Versions
Omnisend / Email Marketing for WooCommerce by Omnisend
n/a ≤ 1.13.8
References
Credits
Mika (Patchstack Alliance)