Campaign Monitor vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Campaign Monitor products: 1 record(s), with severity, exploitation and fixes.

Campaign Monitor for WordPress 1

Exploited only (KEV) →

CVE-2026-0674 Medium · 4.3 CWE-862 Jan 8, 2026

WordPress Campaign Monitor for WordPress plugin <= 2.9.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Campaign Monitor Campaign Monitor for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Campaign Monitor for WordPress: from n/a through 2.9.1.