Ultimate WP Mail
Rustaurius
Developer
1.3.10
Latest version
900
Installations
Oct 16, 2025
Last updated
Vulnerability history
1 present
5 fixed
2 Mitigation rules
- Cross Site Scripting (XSS) Vulnerability<= 1.3.8Sep 22, 2025
- WordPress Ultimate WP Mail plugin 1.0.17 - 1.3.6 - Missing Authorization to Authenticated (Contributor+) Privilege Escalation via get_email_log_details Function vulnerability1.0.17 - 1.3.6Jul 16, 2025
- Account Takeover via Email Log Leak Vulnerability<= 1.3.5Jun 5, 2025
- SQL Injection Vulnerability<= 1.3.4May 7, 2025
- Cross Site Request Forgery (CSRF) Vulnerability<= 1.3.4May 7, 2025
- Open Redirection vulnerability<= 1.3.10Apr 9, 2025