Rustaurius Ultimate WP Mail vulnerabilities
6 published CVEs name Rustaurius Ultimate WP Mail among the affected products.
- Published CVEs
- 6
- Last 12 months
- 0
- Critical
- 0
- Known exploited
- 0
Critical 0High 3Medium 3Low 0Not scored 0
Newest CVEs
- CVE-2025-53454
WordPress Ultimate WP Mail Plugin <= 1.3.8 - Cross Site Scripting (XSS) Vulnerability
Rustaurius · Ultimate WP Mail
Medium6.5 - CVE-2025-6993
Ultimate WP Mail 1.0.17 - 1.3.6 - Missing Authorization to Authenticated (Contributor+) Privilege Escalation via get_email_log_details Function
rustaurius · Ultimate WP Mail
High7.5 - CVE-2025-49288
WordPress Ultimate WP Mail plugin <= 1.3.5 - Account Takeover via Email Log Leak Vulnerability
Rustaurius · Ultimate WP Mail
High8.8 - CVE-2025-47490
WordPress Ultimate WP Mail plugin <= 1.3.4 - SQL Injection Vulnerability
Rustaurius · Ultimate WP Mail
High8.5 - CVE-2025-47466
WordPress Ultimate WP Mail plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability
Rustaurius · Ultimate WP Mail
Medium5.4 - CVE-2025-32694
WordPress Ultimate WP Mail plugin <= 1.3.10 - Open Redirection vulnerability
Rustaurius · Ultimate WP Mail
Medium4.7