CVE-2026-59537: Sender – Newsletter, Sms And Email Marketing Automation For Woocommerce

High severity, CVSS 7.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Administrator SQL Injection in Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.10.22 versions.

Affected products

• Sender Sender – Newsletter, Sms And Email Marketing Automation For Woocommerce: up to and including 2.10.22

Published 2026-07-27. Last modified 2026-07-27.