Plugin icon

weMail – Email Marketing, Newsletter Builder & Email Automations for WooCommerce

wemail

Vulnerabilities:

6

Last Updated:

June 17, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-05-27
Title
weMail < 2.1.3 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.1.3
CVSS
7.1 (high)
Published
2026-02-20
Title
weMail < 2.0.8 - Missing Authorization to Unauthenticated Form Deletion
Fixed in
Fixed in 2.0.8
CVSS
6.5 (medium)
Published
2026-01-19
Title
weMail < 2.0.8 - Sensitive Information Disclosure
Fixed in
Fixed in 2.0.8
CVSS
5.3 (medium)
Published
2025-05-07
Title
weMail < 1.14.14 - Unauthenticated Sensitive Information Exposure
Fixed in
Fixed in 1.14.14
CVSS
5.3 (medium)
Published
2024-08-12
Title
weMail < 1.14.6 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.14.6
CVSS
6.1 (medium)
Published
2024-05-15
Title
weMail < 1.14.3 - Missing Authorization to Notice Dismissal
Fixed in
Fixed in 1.14.3
CVSS
5.3 (medium)