Email marketing for WordPress by GetResponse Official [getresponse-official] <= 1.5.3 (unfixed)
unknown
[en] Missing Authorization vulnerability in GetResponse Email marketing for WordPress by GetResponse Official getresponse-official allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Email marketing for WordPress by GetResponse Official: from n/a through <= 1.5.3.
- Affected:
- up to 1.5.3
- Fix:
- No patched version reported
- Disclosed:
- Dec 18, 2025
CVE-2025-64273 on NVD →
Email marketing for WordPress by GetResponse Official [getresponse-official] <= 1.5.3 (unfixed)
unknown
[en] Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in GetResponse Email marketing for WordPress by GetResponse Official getresponse-official allows Retrieve Embedded Sensitive Data.This issue affects Email marketing for WordPress by GetResponse Official: from n/a through <= 1....
- Affected:
- up to 1.5.3
- Fix:
- No patched version reported
- Disclosed:
- Dec 18, 2025
CVE-2025-64272 on NVD →
Email marketing for WordPress by GetResponse Official <= 1.5.3 - Missing Authorization
medium
The Email marketing for WordPress by GetResponse Official plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.5.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unaut...
- CVSS:
- 4.3
- Affected:
- up to 1.5.3
- Fixed in:
- 1.5.4
- Disclosed:
- Sep 25, 2025
CVE-2025-64273 on NVD →
Email marketing for WordPress by GetResponse Official <= 1.5.3 - Authenticated (Subscriber+) Information Exposure
medium
The Email marketing for WordPress by GetResponse Official plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.5.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract sensitive user or configuration data.
- CVSS:
- 4.3
- Affected:
- up to 1.5.3
- Fixed in:
- 1.5.4
- Disclosed:
- Sep 25, 2025
CVE-2025-64272 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database