Skip to content
Rustaurius Ultimate WP Mail
-
CVE-2025-53454
Medium 6.5
WordPress Ultimate WP Mail Plugin <= 1.3.8 - Cross Site Scripting (XSS) Vulnerability
0.3%
-
CVE-2025-6993
High 7.5
Ultimate WP Mail 1.0.17 - 1.3.6 - Missing Authorization to Authenticated (Contributor+) Privilege Escalation via get_email_log_details Function
0.5%
-
CVE-2025-49288
High 8.8
WordPress Ultimate WP Mail plugin <= 1.3.5 - Account Takeover via Email Log Leak Vulnerability
0.6%
-
CVE-2025-47490
High 8.5
WordPress Ultimate WP Mail plugin <= 1.3.4 - SQL Injection Vulnerability
0.3%
-
CVE-2025-47466
Medium 5.4
WordPress Ultimate WP Mail plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability
0.2%
-
CVE-2025-32694
Medium 4.7
WordPress Ultimate WP Mail plugin <= 1.3.10 - Open Redirection vulnerability
0.4%