Login Request a demo
WM
Product
WP Mail Log
by WPVibes · last CVE Jun 11, 2026
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 7Medium 2Low 0
Severity
All severities9Critical0High7Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WP Mail Log to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-51410
8.8
1%
Dec 29
Unrestricted Upload of File with Dangerous Type vulnerability in WPVibes WP Mail Log.This issue affects WP Mail Log: from n/a through 1.1.2
Affected: through 1.1.2
CVE-2023-5674
8.8
11%
Dec 26
The WP Mail Log WordPress plugin before 1.1.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users…
Affected: before 1.1.3
CVE-2023-5673
8.8
1%
Dec 26
The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file extensions uploading files to attach to emails, allowing attackers to upload PHP files, leading to…
Affected: before 1.1.3
CVE-2023-5645
8.8
1%
Dec 26
The WP Mail Log WordPress plugin before 1.1.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users…
Affected: before 1.1.3
CVE-2022-45807
8.8
0%
Feb 2
Cross-Site Request Forgery (CSRF) in WPVibes WP Mail Log plugin <= 1.0.1 versions
Affected: before 1.0.2
CVE-2023-5644
7.6
0%
Dec 26
The WP Mail Log WordPress plugin before 1.1.3 does not correctly authorize its REST API endpoints, allowing users with the Contributor role to view and delete data that should…
Affected: before 1.1.3
CVE-2023-33999
7.1
0%
Jun 11
WordPress WP Mail Log plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: through 1.0.2
Showing 7