cleantalk
Vulnerabilities and Security Researches

Ultimate WP Mail, CVE-2025-49288

CVE, Research URL

CVE-2025-49288

Application

Ultimate WP Mail

Published on
Jun 06, 2025
Research Description
Missing Authorization vulnerability in Rustaurius Ultimate WP Mail allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Ultimate WP Mail: from n/a through 1.3.5.
Affected versions
Min -, max 1.3.6.
Status
vulnerable