wpcommerz
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| twinklesmtp – Email Service Provider For WordPress | 1 | – | Jan 7, 2026 |
Exploited and recent CVEs
- CVE-2025-14887 twinklesmtp – Email Service Provider For WordPress <= 1.03 - Authenticated (Administrator+) Stored Cross-Site Scripting via Sender Settings 0.2%