plugin

Getresponse Official Vulnerabilities

4 known security issues reported for the Getresponse Official WordPress plugin. Most recent disclosed Dec 18, 2025.

2 medium

Running Getresponse Official on your site? Check whether your installed version is affected.

Scan your site free

Email marketing for WordPress by GetResponse Official [getresponse-official] <= 1.5.3 (unfixed)

unknown

[en] Missing Authorization vulnerability in GetResponse Email marketing for WordPress by GetResponse Official getresponse-official allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Email marketing for WordPress by GetResponse Official: from n/a through <= 1.5.3.

Affected:
up to 1.5.3
Fix:
No patched version reported
Disclosed:
Dec 18, 2025

CVE-2025-64273 on NVD →

Email marketing for WordPress by GetResponse Official [getresponse-official] <= 1.5.3 (unfixed)

unknown

[en] Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in GetResponse Email marketing for WordPress by GetResponse Official getresponse-official allows Retrieve Embedded Sensitive Data.This issue affects Email marketing for WordPress by GetResponse Official: from n/a through <= 1....

Affected:
up to 1.5.3
Fix:
No patched version reported
Disclosed:
Dec 18, 2025

CVE-2025-64272 on NVD →

Email marketing for WordPress by GetResponse Official <= 1.5.3 - Missing Authorization

medium

The Email marketing for WordPress by GetResponse Official plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.5.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unaut...

CVSS:
4.3
Affected:
up to 1.5.3
Fixed in:
1.5.4
Disclosed:
Sep 25, 2025

CVE-2025-64273 on NVD →

Email marketing for WordPress by GetResponse Official <= 1.5.3 - Authenticated (Subscriber+) Information Exposure

medium

The Email marketing for WordPress by GetResponse Official plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.5.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract sensitive user or configuration data.

CVSS:
4.3
Affected:
up to 1.5.3
Fixed in:
1.5.4
Disclosed:
Sep 25, 2025

CVE-2025-64272 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database