Skip to content
OpenAdvisories

Vendor

Shaharia Azam

2 known vulnerabilities.

Products

Auto Post After Image Upload 1 WP Mail Gateway 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-6963

    WP Mail Gateway <= 1.8 - Missing Authorization to Authenticated (Subscriber+) SMTP Configuration Modification via 'wmg_save_provider_config' AJAX Action

    The WP Mail Gateway plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wmg_save_provider_config AJAX action in all versions up to, and including, 1.8. This makes it possible for authenticated attackers, with Sub…

    Shaharia Azam WP Mail Gateway Web / CMS