WP Mail

Vulnerabilities 3Slug wp-mailLatest version 1.3WordPress.org →

Minimum safe version

1.2

Update to 1.2 or later to address 1 fixable vulnerability

Latest available1.3 ✓⚠ 2 vulnerabilities have no fix
High 7.1 Unfixed
2026-01-22≤ 1.3

CVE-2025-68008

CVEWordfence
Medium 6.5 Unfixed
2025-09-05≤ 1.3

WordPress WP Mail Plugin <= 1.3 - Cross Site Scripting (XSS) Vulnerability

CVEPatchstackWordfenceEUVD