Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

Ultimate WP Mail — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in Ultimate WP Mail, with AI-generated Chinese analysis, references, and POCs.

Vendor: Rustaurius

CVE IDTitleCVSSSeverityPaused
CVE-2025-53454 WordPress Ultimate WP Mail Plugin <= 1.3.8 - Cross Site Scripting (XSS) Vulnerability CWE-79 6.5 Medium2025-09-22
CVE-2025-6993 Ultimate WP Mail 1.0.17 - 1.3.6 - Missing Authorization to Authenticated (Contributor+) Privilege Escalation via get_email_log_details Function CWE-862 7.5 High2025-07-16
CVE-2025-49288 WordPress Ultimate WP Mail plugin <= 1.3.5 - Account Takeover via Email Log Leak Vulnerability CWE-862 8.8 High2025-06-06
CVE-2025-47490 WordPress Ultimate WP Mail plugin <= 1.3.4 - SQL Injection Vulnerability CWE-89 8.5 High2025-05-07
CVE-2025-47466 WordPress Ultimate WP Mail plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability CWE-352 5.4 Medium2025-05-07
CVE-2025-32694 WordPress Ultimate WP Mail plugin <= 1.3.10 - Open Redirection vulnerability CWE-601 4.7 Medium2025-04-09

All 6 known CVE vulnerabilities affecting Ultimate WP Mail with full Chinese analysis, references, and POCs where available.