Wedevs Wemail vulnerabilities

• unknown wemail weMail <= 2.1.6 - Editor+ API Key Disclosure CVE-2026-104648 4.9 MediumNovember 3, 2026
• unknown wemail weMail <= 2.1.6 - Editor+ Incorrect Authorization via User::can() CVE-2026-104647 3.8 LowNovember 3, 2026
• wedevs wemail WordPress weMail plugin <= 2.1.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-57322 7.1 HighJune 26, 2026
• unknown wemail: email marketing, email automation, newsletters, subscribers & email optins for woocommerce weMail < 2.1.3 - Reflected Cross-Site Scripting CVE-2026-8089 7.1 HighJune 17, 2026
• wedevs wemail: email marketing, email automation, newsletters, subscribers & email optins for woocommerce weMail <= 2.0.7 - Missing Authorization to Unauthenticated Form Deletion CVE-2025-14339 6.5 MediumFebruary 21, 2026
• wedevs wemail: email marketing, email automation, newsletters, subscribers & email optins for woocommerce weMail <= 2.0.7 - Insufficient Authorization via x-wemail-user Header to Sensitive Information Disclosure CVE-2025-14348 5.3 MediumJanuary 20, 2026
• wedevs wemail WordPress weMail plugin <= 1.14.13 - Sensitive Data Exposure Vulnerability CVE-2025-47540 5.3 MediumMay 7, 2025
• wedevs wemail WordPress weMail plugin <= 1.14.5 - Cross Site Scripting (XSS) vulnerability CVE-2024-43238 7.1 HighAugust 18, 2024
• wedevs wemail WordPress weMail plugin <= 1.14.2 - Broken Access Control vulnerability CVE-2024-34822 5.3 MediumJune 11, 2024