WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-mail-options
Published
2025-06-05
Title
WP Mail Options <= 0.2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-mail-smtp
Published
2018-12-02
Title
WP Mail SMTP by WPForms < 1.4.0 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
wp-mail-smtp
Published
2024-07-19
Title
WP Mail SMTP < 4.1.0 - Admin+ SMTP Password Exposure
Slug
wp-mail-smtp-pro
Published
2023-10-03
Title
WP Mail SMTP Pro < 3.8.1 - Unauthenticated Email Address Disclosure
Slug
wp-mailer
Published
2025-02-16
Title
WP Easy Post Mailer <= 0.64 - Reflected Cross-Site Scripting
Slug
wp-mailgun-smtp
Published
2025-08-21
Title
WP Mailgun SMTP <= 1.0.7 - Missing Authorization
Slug
wp-mailgun-smtp
Published
2025-09-12
Title
Multiple Plugins and Themes by inkthemes - Unauthenticated Information Exposure
Slug
wp-mailing-group
Published
2025-01-07
Title
Mailing Group Listserv < 3.0.0 - Admin+ SQL Injection
Slug
wp-mailing-group
Published
2025-01-07
Title
Mailing Group Listserv < 3.0.0 - Reflected Cross-Site Scripting
Slug
wp-mailing-group
Published
2025-04-25
Title
Mailing Group Listserv < 3.0.5 - Authenticated (Subscriber+) SQL Injection
Slug
wp-mailing-group
Published
2025-06-19
Title
Mailing Group Listserv <= 3.0.5 - Cross-Site Request Forgery
Slug
wp-mailster
Published
2017-12-05
Title
WP Mailster <= 1.5.4 - Unauthenticated Cross-Site Scripting (XSS)
Slug
wp-mailster
Published
2024-12-02
Title
WP Mailster < 1.8.18.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-mailster
Published
2024-12-02
Title
WP Mailster < 1.8.17.0 - Authenticated (Contributor+) SQL Injection via orderby
Slug
wp-mailster
Published
2024-12-02
Title
WP Mailster < 1.8.17.0 - Missing Authorization
Slug
wp-mailster
Published
2024-12-02
Title
WP Mailster < 1.8.17.0 - Missing Authorization
Slug
wp-mailster
Published
2024-11-23
Title
WP Mailster < 1.8.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-mailster
Published
2024-12-02
Title
WP Mailster < 1.8.17.0 - Unauthenticated Information Exposure
Slug
wp-mailster
Published
2024-12-11
Title
WP Mailster < 1.8.18.0 - Cross-Site Request Forgery
Slug
wp-mailster
Published
2025-01-06
Title
WP Mailster < 1.8.18.0 - Unauthenticated Sensitive Information Exposure
Slug
wp-mailster
Published
2024-12-07
Title
WP Mailster < 1.8.17.0 - Unauthenticated Sensitive Information Exposure
Slug
wp-mailster
Published
2024-11-23
Title
WP Mailster < 1.8.16.0 - Reflected Cross-Site Scripting
Slug
wp-mailster
Published
2024-12-22
Title
WP Mailster < 1.8.18.0 - Reflected Cross-Site Scripting
Slug
wp-mailster
Published
2025-01-28
Title
WP Mailster < 1.8.21.0 - Reflected Cross-Site Scripting
Slug
wp-mailto-links
Published
2023-09-22
Title
WP Mailto Links – Protect Email Addresses < 3.1.4 - Contributor+ Stored XSS