Skip to content
OpenAdvisories
High · 8.8 CVE-2025-26741 EUVD-2025-10957GHSA-4ggw-vj5v-vmmr

WordPress Email Notifications for Updates <= 1.1.6 - Privilege Escalation Vulnerability

Published Apr 15, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in AWEOS GmbH Email Notifications for Updates wp-update-mail-notification allows Privilege Escalation.This issue affects Email Notifications for Updates: from n/a through <= 1.1.6.

Affected products

VendorProductAffectedFixed
AWEOS Email Notifications for Updates ≤ 1.1.6 —

References