Read the docs

weDevs

Records145All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high51CVSS 7.0–8.9

Exploited now

weDevs records in CISA KEV

No weDevs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Erp 16 records HIGH Wp Project Manager 16 records MEDIUM Happy Addons For Elementor 8 records LOW Wemail 3 records LOW Wp User Frontend 3 records HIGH Recaptcha Integration 1 record LOW Woocommerce Conversion Tracking 1 record LOW

Records

3 records in Wemail · all components

TI-2025-30037 CVE-2025-47540 · GHSA-xh8p-8v2c-5w7v

WordPress weMail plugin <= 1.14.13 - Sensitive Data Exposure Vulnerability

Priority LOW 39

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs weMail wemail allows Retrieve Embedded Sensitive Data.This issue affects weMail: from n/a through <= 1.14.13.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00418 Published 2025-05-07 No fix listed CWE-497
TI-2024-28891 CVE-2024-43238 · GHSA-r3q2-4p93-pgrg

WordPress weMail plugin <= 1.14.5 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs weMail wemail allows DOM-Based XSS.This issue affects weMail: from n/a through <= 1.14.5.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00308 Published 2024-08-18 No fix listed CWE-79
Open these records in search →