WordPress Wp Mail Vulnerabilities
Wordpress Wp Mail vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Cross-Site Scripting Vulnerability in Rustaurius Ultimate WP Mail Plugin
CVE-2025-53454WordPressUltimate WP Mail6.5MEDIUMCross-Site Scripting Vulnerability in WP Mail Plugin by mndpsingh287
CVE-2025-58822WordPressWP Mail6.5MEDIUMPrivilege Escalation in Ultimate WP Mail Plugin for WordPress
CVE-2025-6993WordPressUltimate WP Mail8.8HIGHCross-Site Request Forgery in Mail250 Free WP Mail SMTP Plugin by WordPress
CVE-2025-28974WordPressFree WP Mail Smtp7.1HIGHCross-Site Request Forgery Vulnerability in Soli WP Mail Options by WordPress
CVE-2025-28981WordPressWP Mail Options7.1HIGHAuthorization Flaw in Rustaurius Ultimate WP Mail Affects WordPress Security
CVE-2025-49288WordPressUltimate WP Mail4.3MEDIUMSQL Injection Vulnerability in Ultimate WP Mail by Rustaurius
CVE-2025-47490WordPressUltimate WP Mail8.5HIGHCross-Site Request Forgery Vulnerability in Ultimate WP Mail by Rustaurius
CVE-2025-47466WordPressUltimate WP Mail5.4MEDIUMOpen Redirect Vulnerability in Rustaurius Ultimate WP Mail Product by Rustaurius
CVE-2025-32694WordPressUltimate WP Mail4.7MEDIUMFreemius SDK Vulnerabilities Affect Hundreds of WordPress Plugins and Themes
CVE-2022-4974WordpressYasr – Yet Another Sta...6.3MEDIUMReflected XSS Vulnerability in WP Mail Catcher
CVE-2024-47339WordPressWP Mail Catcher7.1HIGHInformation Exposure Vulnerability in WP Mail SMTP Plugin
CVE-2024-6694WordpressWP Mail Smtp By WPform...2.7LOWCross-Site Request Forgery (CSRF) vulnerability in WP Mail Catcher
CVE-2024-32099WordPressWP Mail Catcher4.3MEDIUMWordPress WP Mail Log Plugin <= 1.1.2 is vulnerable to Arbitrary File Upload
CVE-2023-51410WordPressWP Mail Log9.9CRITICALWordPress WP Mail Catcher Plugin <= 2.1.3 is vulnerable to SQL Injection
CVE-2023-50844WordPressMail logging – WP Mail...7.6HIGHWP Mail Log < 1.1.3 – Incorrect Authorization in REST API Endpoints
CVE-2023-5644WordpressWP Mail Log7.6HIGHWP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs endpoint
CVE-2023-5645WordpressWP Mail Log8.8HIGHWP Mail Log < 1.1.3 – Contributor+ LFI in wml_logs/send_mail endpoint
CVE-2023-5672WordpressWP Mail Log6.5MEDIUMWP Mail Log < 1.1.3 – Contributor+ Arbitrary File Upload to RCE
CVE-2023-5673WordpressWP Mail Log8.8HIGHWP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs/send_mail endpoint
CVE-2023-5674WordpressWP Mail LogEPSS 11%8.8HIGHUnauthorized Data Access in WP Mail SMTP Pro Plugin by WordPress
CVE-2023-3213WordpressWP Mail Smtp Pro5.3MEDIUMWordPress WP HTML Mail Plugin <= 3.4.1 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-40202WordPressWP Html Mail5.4MEDIUMStored Cross-Site Scripting Vulnerability in WP Mail Catcher Plugin for WordPress
CVE-2023-3080WordpressMail logging – WP Mail...6.1MEDIUMStored Cross-Site Scripting Vulnerability in WP Mail Logging for WordPress
CVE-2023-3081WordPressWP Mail Logging7.2HIGHStored Cross-Site Scripting Vulnerability in FluentSMTP Plugin for WordPress
CVE-2023-3087WordPressFluentsmtp – WP Mail S...7.2HIGH