Sendy - Send newsletters, 100x cheaper v7.1.7 Nulled

View hidden content is available for registered users!

Sendy - Send newsletters, 100x cheaper v7.1.7 Nulled
- Security: Logins now use a separate, revocable token for each device instead of a cookie built from account data. Logging out signs out that device. Changing your password or turning 2FA on or off signs out your other devices. Resetting your password signs out all of them. Everyone will need to sign in again once after updating.
- Security: The login cookie is now HttpOnly and SameSite=Lax, and Secure when Sendy is served over HTTPS.
- Security: Added CSRF protection to all POST requests made while logged in.
- Security: Added rate limits on failed logins, 2FA codes, password reset emails and passkey sign-ins.
- Security: Strengthened access checks so brand logins can only see and manage their own brand's lists, subscribers, campaigns, autoresponders, segments, templates, rules and reports.
- Security: Only the main account can now create, edit or delete brands, or use tools that affect all brands.
- Security: Subscriber names, emails, custom fields and other subscriber data are now escaped wherever they appear in the admin area (subscriber lists, search, reports, segments, live stats and the subscriber info popup).
- Security: Custom field names and values are now escaped when they're saved to the database. Field names containing :, " or %s% are refused.
- Security: Malformed Host headers are now rejected, and the list ID parameters on the sending page are validated.
- Security: Improved validation when saving segments, campaigns and autoresponders.
- Security: Improved how the autoresponder edit page handles links.
- Security: Tightened which file types can be uploaded as attachments or through the file manager.
- Security: When you run the update, an .htaccess file is now created in /uploads/ to add extra protection to that folder.
- Security: Removed unused demo files from a bundled library and blocked web access to the vendor/ folder. Passkeys still work.
- Fixed: Fixed a rare problem where some web version, open tracking, unsubscribe and other links showed "no longer exists". Links that were already sent work again.
- Fixed: Fixed pages and popups loaded from includes/ (such as the subscriber info popup and the file manager) always showing in English. Date tags in campaigns and autoresponders sent by cron were also always in English, and are now translated too.
- Fixed: The "Opt-in method" and "Added via" labels in the subscriber info popup can now be translated.
- Fixed: Fixed tooltips on the "not opened" export buttons in campaign reports being cut off.
- Fixed: Fixed an empty instructions box showing in Edit brand when the SMTP provider is set to "Other".
- Fixed: Fixed the wrong app being looked up in click tracking (l.php) when the subscriber no longer exists.
- Improved: Fixed PHP 8.1+ "Passing null to parameter" deprecation notices from stripslashes() and trim(). On cron-based sending these were emailed to the server owner on every run.
- Improved: Fixed PHP 8.5 deprecation notices from the bundled PHPMailer and from curl_close().
- Improved: Fixed undefined variable warnings in subscribe.php on PHP 8 for API calls, including when the gdpr field isn't sent.
- Improved: Fixed undefined index warnings in l.php, w.php and subscribe.php when the i parameter is missing.

View hidden content is available for registered users!

Sendy - Send newsletters, 100x cheaper v7.1.6 Nulled
Fixes and enhancements

• Improved protection against unintended unsubscribes. For lists with double opt-out, the final unsubscribe confirmation now uses a secure, single-use form submission instead of a link, so email security scanners can no longer unsubscribe recipients by following links. Single opt-out, RFC 8058 one-click and API unsubscribes are unchanged.
• Improved Subscriber info campaign activity reporting. The Subscriber info modal now handles unavailable campaign activity data more clearly.
• Full links in Subscriber info. The "Links clicked" popover in Campaign activity now shows complete URLs with per-link click counts, and stays open while you move your mouse onto it.
• Restored the ability to export or import subscribers who didn’t open your latest campaign. You’ll find it in the new “not opened” footer on the Opened card in the campaign report.
• Campaign scheduling time dropdowns no longer cuts off hour/minute values. Widened them so the numbers display fully.
• Improved post-login redirect handling.
• Improved handling of special characters in CSV imports. Values containing characters such as double quotes, apostrophes or backslashes are now handled correctly when importing or updating subscribers from a CSV file.
• Improved input validation on the Lists API to ensure brand IDs are handled as expected.
• Fixed: The "not opened" export and import buttons are back in campaign reports, now at the bottom of the Opened card (most recent campaign only).
• Fix subscriber campaign activity report to scope by list, not app. It now shows a subscriber's full campaign history for their own list, even on accounts where other lists send more frequently.
• Fix unescaped click-URL and campaign title breaking subscriber activity table.
• Fixed an issue where segment updates could generate excessive error log entries under certain conditions.
• Fixed a translation bug that could cause Sendy's admin interface to fall back to English or trigger a fatal error when certain non-English locale identifiers weren't recognized by the server.
• Fixed suppression list status badge not translatable.
• Updated geolocation database

View hidden content is available for registered users!

Sendy - Send newsletters, 100x cheaper v7.1.2 Nulled
Changes
File manager now accessible from the left sidebar

Added a new File manager link under Others in each brand’s sidebar. The new file manager opens in a modal window, consistent with the existing 'Files' button in email editors.

Auto-resume interrupted SES campaigns​

Campaigns that stalled during ordinary sending already resumed automatically when a cron job was configured. This release extends that recovery to interrupted Amazon SES batches, which previously required the user to click Resume manually. Cron-enabled SES campaigns now resume automatically on the next cron run, while installations without cron retain the manual Resume option.

Improved sending reliability​

Enhanced campaign sending reliability by improving recovery from idle database connections, allowing Sendy to automatically reconnect, reacquire the campaign lock, and continue sending seamlessly. Also improved handling of Amazon SES 400 responses to keep the sending queue running smoothly.

Fixes and enhancements​

• Added per-link Export and Import options to autoresponder reports, matching the functionality already available in campaign reports. You can now export subscribers who clicked a specific link or import them directly into a list.
• The login page now displays the passkey sign-in option only when at least one passkey has been registered.
• Settings now clearly explains why the “Add passkey” button is unavailable when the browser or connection does not meet passkey requirements.
• Fix WYSIWYG Save buttons in list settings
• Added safe handling for open, click, and unsubscribe rate calculations across campaign and autoresponder reports.
• Fixed a rare DivisionByZeroError that could affect some installations under specific conditions.
• Fixed an issue where plaintext tracking links could be malformed when multiple URLs shared the same domain or prefix. Sendy now processes longer, more specific URLs first when generating tracked plaintext links for campaigns and autoresponders.
• Updated one-click unsubscribe handling to comply with RFC 8058 by processing requests directly without an HTTP redirect.
• Updated the file manager’s Content Security Policy to support Cloudflare Rocket Loader when Sendy is proxied through Cloudflare.
• Subscribe webhooks and Zapier events now fire when a previously unsubscribed user re-subscribes, keeping connected systems in sync while avoiding duplicate events for existing or unconfirmed subscribers.
• Updated geolocation database

View hidden content is available for registered users!

Sendy - Send newsletters, 100x cheaper v7.0.3 Nulled
New Custom Shortcut Key Setting for Light & Dark mode

• You can now define your own custom shortcut key to toggle between light and dark mode
• The shortcut will always begin with Ctrl
• Set the second key from A-Z and 0-9
• Example: Ctrl + G, Ctrl + 7
• The default shortcut key is still Ctrl + D
• You can find this in your Sendy's main settings

Improved Sidebar
The sidebar now maintains a minimum width of 220px, preventing it from shrinking horizontally on smaller screens. This keeps sidebar text fully visible and free from truncation.

Optional AI Features by Brand
You can now choose which brands have access to AI features. A new checkbox has been added to each brand’s settings, allowing you to easily hide AI-powered tools for brands where they’re not needed.

Patch Tiny File Manager integration security

• Remove Tiny File Manager default bundled credentials
• Replace upstream 2.6 version fingerprint with Sendy patched build identifier
• Remove Upload from URL UI, JavaScript, and backend handler to eliminate CVE-2025-46651 SSRF path
• Keep Sendy-authenticated local file uploads intact
• These should satisfy scanners from Siteground and Cloudways

Decryption key:

To view the content, you need to Sign In or Register.

Sendy - Send newsletters, 100x cheaper v6.1.3 Nulled

• Added support for the latest Hyderabad, Zurich and UAE Amazon SES regions.
• The words for days and months, eg. Monday, Tuesday.. January, February.. are now translatable for Autoresponder emails.
• Fixed warning for undefined $app_path in web version script
• Updated CA bundle to the latest
• [PHP 8.3+] Fixed PHP Warning: Trying to access array offset on null when signing up to a list using reCAPTCHA
• [PHP 8.2+] Fixed deprecation errors for ses.php and sns.php classes for
• Type cast (string) to $name to fix "Deprecated: str_replace(): Passing null to parameter #2 ($replace) of type array|string is deprecated in l.php" error for link tracking (thanks Justin at Libib)
• Updated geolocation database

Decryption key:

To view the content, you need to Sign In or Register.

No changelogs found!

No changelogs found!

Download Sendy v6.0.1.1 - Send newsletters, 100x cheaper Nulled Free
v6.0.1.1
Preview personalization tags using real subscriber data in newsletter preview

Download Sendy 4.1.0.1 - Send Newsletters, 100x Cheaper Nulled Free

Get Started with Sendy

Got Sendy? Follow our Get Started Guide to install Sendy on your web hosting server.

sendy.co

v4.1.0.1

• Fixed a bug where selecting a list, then selecting a segment or vice versa (with the previously selected list or segment being automatically deselected) may result in the campaign sending to the automatically unselected list or segment. Thanks Gordon Bühler for the exact steps to replicate this.
• Disable autofill suggestions in the ‘DELETE’ field when deleting brands, campaigns, templates and lists to make deletion a more conscious effort
• Updated geolocation database

v4.1.0

• Added support for Amazon SES's 4 new regions, namely Ohio, Singapore, Tokyo and Seoul, in addition to the current N. Virginia, Oregon, Ireland, Mumbai, Sydney, Frankfurt, London, Canada and Sao Paulo regions.
  Please note that Amazon SES 'regions' have no relation with where you are physically located. Anyone in the world can use Amazon SES. It only matters where your web hosting server is located. For example, if you're hosting Sendy on a hosting server situated in Canada, use Amazon SES in 'Canada' region and you will get the fastest sending speed.
• Replace spaces with hyphens in filenames of exported CSVs from segments for maximum browser compatibility
• Security enhancements
• Updated geolocation database

4.0.8

• You can now export ‘Suppression list’ and ‘Blocked domains’ as CSV
• More helpful information when setting up ‘Custom domains’
• ‘Unlicensed custom domains’ domain error no longer shows when invalid license key is stored in the database
• The QR code generated for 2 Factor Authentication now uses the current Sendy installation URL’s protocol (Thanks Kilian Valkhof)
• The ’Subscription status’ API now returns ‘Bounced’ and ‘Marked as spam’ even if the email address was ‘Soft bounced’ before. (Thanks Alessandro Serena)
• Updated geolocation database