Read the docs

Rustaurius

Records34All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

Rustaurius records in CISA KEV

No Rustaurius vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ultimate Wp Mail 1 record MEDIUM

Records

1 record in Ultimate Wp Mail · all components

TI-2025-06360 CVE-2025-6993 · GHSA-x33w-hjv7-gpx7

Missing authorization in Rustaurius Ultimate WP Mail

Priority MEDIUM 41

The Ultimate WP Mail plugin for WordPress is vulnerable to Privilege Escalation due to improper authorization within the get_email_log_details() AJAX handler in versions 1.0.17 to 1.3.6.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00536 Published 2025-07-16 No fix listed CWE-862
Open these records in search →