Login Request a demo
WE
Product
weMail
by weDevs · last CVE Jun 26, 2026
4
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 2Medium 2Low 0
Severity
All severities4Critical0High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add weMail to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-47540
7.5
0%
May 7
WordPress weMail plugin <= 1.14.13 - Sensitive Data Exposure Vulnerability
Affected: through 1.14.13
CVE-2026-57322
7.1
0%
Jun 26
WordPress weMail plugin <= 2.1.2 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: through 2.1.2
CVE-2024-43238
6.1
0%
Aug 18
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs weMail wemail allows DOM-Based XSS.This issue affects weMail: from n/a…
Affected: before 1.14.6
CVE-2024-34822
5.3
0%
Jun 11
Missing Authorization vulnerability in weDevs weMail.This issue affects weMail: from n/a through 1.14.2
Affected: before 1.14.3
Showing 4