Vulnerabilities / Hostinger Reach
Hostinger Reach vulnerabilities
Advisories WPSec published for Hostinger Reach – AI-Powered Email Marketing for WordPress. Other sources may list more. Its attack surface: Hostinger Reach on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-02 | WPSEC-2026-0255 | Hostinger Reach <= 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Elementor Subscription Form Widget 'formId' Setting | Medium 6.4 | 1.8.3 |
License: CC BY 4.0