Rustaurius Ultimate WP Mail vulnerabilities
6 published CVEs name Rustaurius Ultimate WP Mail among the affected products.
- 6Published CVEs6 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-53454
WordPress Ultimate WP Mail Plugin <= 1.3.8 - Cross Site Scripting (XSS) Vulnerability
Rustaurius · Ultimate WP Mail
Medium6.5 - CVE-2025-6993
Ultimate WP Mail 1.0.17 - 1.3.6 - Missing Authorization to Authenticated (Contributor+) Privilege Escalation via get_email_log_details Function
rustaurius · Ultimate WP Mail
High7.5 - CVE-2025-49288
WordPress Ultimate WP Mail plugin <= 1.3.5 - Account Takeover via Email Log Leak Vulnerability
Rustaurius · Ultimate WP Mail
High8.8 - CVE-2025-47490
WordPress Ultimate WP Mail plugin <= 1.3.4 - SQL Injection Vulnerability
Rustaurius · Ultimate WP Mail
High8.5 - CVE-2025-47466
WordPress Ultimate WP Mail plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability
Rustaurius · Ultimate WP Mail
Medium5.4 - CVE-2025-32694
WordPress Ultimate WP Mail plugin <= 1.3.10 - Open Redirection vulnerability
Rustaurius · Ultimate WP Mail
Medium4.7