mailgun

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

mailgun records in CISA KEV

No mailgun vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-54277 CVE-2026-78003 · GHSA-jr9c-873v-948h

Mailgun for WordPress <= 2.2.0 - Unauthenticated Server-Side Request Forgery (SSRF) via 'addresses' Array Keys

MEDIUM 50

The Mailgun for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF) via path traversal in versions up to and including 2.2.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00791 Published 2026-08-22 No fix listed CWE-918

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0