Plugin icon

Mailgun for WordPress

mailgun

Vulnerabilities:

2

Last Updated:

September 2, 2026

Active Installs:

80000

Published
Title
Fixed in
CVSS
Published
2026-08-21
Title
Mailgun for WordPress < 2.2.1 - Unauthenticated Server-Side Request Forgery (SSRF) via 'addresses' Array Keys
Fixed in
Fixed in 2.2.1
CVSS
9.8 (critical)
Published
2026-07-13
Title
Mailgun for WordPress < 2.2.1 - Unauthenticated Arbitrary Mailgun List Subscription via add_list AJAX
Fixed in
Fixed in 2.2.1
CVSS
5.3 (medium)