Sensitive Data Exposure in weMail by weDevs
CVE-2025-47540

7.5HIGH

Key Information:

Vendor

WordPress
Status
Wemail
Vendor
CVE Published:
7 May 2025

What is CVE-2025-47540?

The weMail plugin by weDevs has a vulnerability that allows unauthorized users to retrieve embedded sensitive system information. This weakness affects versions up to 1.14.13, potentially leading to the exposure of confidential data. Users are advised to update their plugins promptly and assess their security configurations to mitigate the risks associated with this vulnerability. For detailed information and guidance, refer to reputable sources.

Affected Version(s)

weMail <= 1.14.13

References

https://patchstack.com/database/wordpress/plugin/wemail/v...
vdb-entry

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Denver Jackson (Patchstack Alliance)
.