Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: weDevs Component: Wemail Clear all filters
TI-2025-30037 CVE-2025-47540 · GHSA-xh8p-8v2c-5w7v

WordPress weMail plugin <= 1.14.13 - Sensitive Data Exposure Vulnerability

Priority LOW 39

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs weMail wemail allows Retrieve Embedded Sensitive Data.This issue affects weMail: from n/a through <= 1.14.13.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00418 Published 2025-05-07 No fix listed CWE-497
TI-2024-28891 CVE-2024-43238 · GHSA-r3q2-4p93-pgrg

WordPress weMail plugin <= 1.14.5 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs weMail wemail allows DOM-Based XSS.This issue affects weMail: from n/a through <= 1.14.5.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00308 Published 2024-08-18 No fix listed CWE-79