Skip to content
OpenAdvisories

Vendor

AWEOS

3 known vulnerabilities.

Products

Email Notifications for Updates 2 AWEOS WP Lock 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2025-26741

    WordPress Email Notifications for Updates <= 1.1.6 - Privilege Escalation Vulnerability

    Missing Authorization vulnerability in AWEOS GmbH Email Notifications for Updates wp-update-mail-notification allows Privilege Escalation.This issue affects Email Notifications for Updates: from n/a through <= 1.1.6.

    AWEOS Email Notifications for Updates
  • High 8.8
    CVE-2025-2933

    Email Notifications for Updates <= 1.1.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

    The Email Notifications for Updates plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the awun_import_settings() function in all versions up to, and including, 1.…

    AWEOS Email Notifications for Updates Web / CMS