Plugin icon

WP Mail Log

wp-mail-log

Vulnerabilities:

9

Last Updated:

June 15, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2023-12-27
Title
WP Mail Log Plugin < 1.1.3 - Contributor+ Arbitrary File Upload
Fixed in
Fixed in 1.1.3
CVSS
7.2 (high)
Published
2023-11-28
Title
WP Mail Log < 1.1.3 – Incorrect Authorization in REST API Endpoints
Fixed in
Fixed in 1.1.3
CVSS
3.8 (low)
Published
2023-11-28
Title
WP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs/send_mail endpoint
Fixed in
Fixed in 1.1.3
CVSS
6.8 (medium)
Published
2023-11-28
Title
WP Mail Log < 1.1.3 – Contributor+ Arbitrary File Upload to RCE
Fixed in
Fixed in 1.1.3
CVSS
9.1 (critical)
Published
2023-11-28
Title
WP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs endpoint
Fixed in
Fixed in 1.1.3
CVSS
6.8 (medium)
Published
2023-11-28
Title
WP Mail Log < 1.1.3 – Contributor+ LFI in wml_logs/send_mail endpoint
Fixed in
Fixed in 1.1.3
CVSS
4.9 (medium)
Published
2023-11-20
Title
WP Mail Log < 1.1.3 - Editor+ SQL Injection via id
Fixed in
Fixed in 1.1.3
CVSS
7.2 (high)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.1
CVSS
6.1 (medium)
Published
2023-07-05
Title
WP Mail Log < 1.1.2 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.1.2
CVSS
7.2 (high)