All 6 CVE vulnerabilities found in Ultimate WP Mail, with AI-generated Chinese analysis, references, and POCs.
Vendor: Rustaurius
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-53454 | WordPress Ultimate WP Mail Plugin <= 1.3.8 - Cross Site Scripting (XSS) Vulnerability CWE-79 | 6.5 | Medium | 2025-09-22 |
| CVE-2025-6993 | Ultimate WP Mail 1.0.17 - 1.3.6 - Missing Authorization to Authenticated (Contributor+) Privilege Escalation via get_email_log_details Function CWE-862 | 7.5 | High | 2025-07-16 |
| CVE-2025-49288 | WordPress Ultimate WP Mail plugin <= 1.3.5 - Account Takeover via Email Log Leak Vulnerability CWE-862 | 8.8 | High | 2025-06-06 |
| CVE-2025-47490 | WordPress Ultimate WP Mail plugin <= 1.3.4 - SQL Injection Vulnerability CWE-89 | 8.5 | High | 2025-05-07 |
| CVE-2025-47466 | WordPress Ultimate WP Mail plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability CWE-352 | 5.4 | Medium | 2025-05-07 |
| CVE-2025-32694 | WordPress Ultimate WP Mail plugin <= 1.3.10 - Open Redirection vulnerability CWE-601 | 4.7 | Medium | 2025-04-09 |
All 6 known CVE vulnerabilities affecting Ultimate WP Mail with full Chinese analysis, references, and POCs where available.