What’s Vulnerable › Products

Rustaurius Ultimate WP Mail vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your Rustaurius Ultimate WP Mail version is affected

Latest Rustaurius Ultimate WP Mail vulnerabilities

• CVE-2025-53454 — WordPress Ultimate WP Mail Plugin <= 1.3.8 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
• CVE-2025-6993 — Ultimate WP Mail 1.0.17 - 1.3.6 - Missing Authorization to Authenticated (Contributor+) Privilege Escalation via get_email_log_details Function (CVSS 8.8)
• CVE-2025-49288 — WordPress Ultimate WP Mail plugin <= 1.3.5 - Account Takeover via Email Log Leak Vulnerability (CVSS 8.8)
• CVE-2025-47490 — WordPress Ultimate WP Mail plugin <= 1.3.4 - SQL Injection Vulnerability (CVSS 8.5)
• CVE-2025-47466 — WordPress Ultimate WP Mail plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 5.4)
• CVE-2025-32694 — WordPress Ultimate WP Mail plugin <= 1.3.10 - Open Redirection vulnerability (CVSS 4.7)