Vulnerabilities / Retainful
Retainful vulnerabilities
Advisories WPSec published for Email Marketing for WordPress and WooCommerce – Retainful. Other sources may list more. Its attack surface: Retainful on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-07 | WPSEC-2026-0549 | Retainful <= 1.0.10 - Unauthenticated Missing Authorization to Connection Settings Update and Sensitive Information Exposure | Medium 6.5 | 1.0.11 |
| 2026-10-07 | WPSEC-2026-0548 | Retainful <= 1.0.10 - Authenticated (Subscriber+) Missing Authorization to Webhook Registration and Coupon Creation via REST API | High 7.1 | 1.0.11 |
License: CC BY 4.0