WP Mail Logging <= 1.15.0 - Unauthenticated PHP Object Injection via Email Log Message Field
WP Mail Logging
Minimum safe version
1.16
Update to 1.16 or later to address 10 fixable vulnerabilities
Latest available1.16.0 ✓
N/A
2026-02-27< 1.16
N/A
< 1.8.3
WP Mail Logging <= 1.8.2 - Stored Cross-Site Scripting
N/A
2023-06-26< 1.12.0
WordPress WP Mail Logging Plugin < 1.12.0 is vulnerable to Broken Access Control
N/A
2023-06-23< 1.12.0
WP Mail Logging <= 1.11.2 - Missing Authorization to Notice Dismissal
Medium 6.1
2023-07-12< 1.11.2
CVE-2023-3081
N/A
2023-03-21< 1.11.0
WordPress WP Mail Logging Plugin <= 1.10.5 is vulnerable to Cross Site Request Forgery (CSRF)
N/A
2017-11-11< 1.8.3
WP Mail Logging <= 1.8.2 - Cross-Site Scripting
N/A
2021-11-29< 1.10.0
WP Mail Logging < 1.10.0 - Unauthenticated Arbitrary Settings Change
N/A
2017-11-20< 1.8.3
WordPress WP Mail Logging plugin <=1.8.2 - Stored Cross-Site Scripting (XSS) vulnerability
Medium 5.3
2021-11-29< 1.10.0
WordPress WP Mail Logging plugin <= 1.9.9 - Using Components with Known Vulnerabilities (vulnerable Redux Framework version)