Skip to content
OpenAdvisories

Product · smub

WP Mail Logging

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-2471

    WP Mail Logging <= 1.15.0 - Unauthenticated PHP Object Injection via Email Log Message Field

    The WP Mail Logging plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.15.0 via deserialization of untrusted input from the email log message field. This is due to the `BaseModel` class constructor calling `mayb…

    smub WP Mail Logging Web / CMS
  • High 7.2
    CVE-2023-3081

    WP Mail Logging <= 1.11.1 - Unauthenticated Stored Cross-Site Scripting via Email

    The WP Mail Logging plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 1.11.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers …

    smub WP Mail Logging Web / CMS