Ultimate WP Mail, CVE-2025-53454

CVE, Research URL: CVE-2025-53454
Home page URL: Security reports for Ultimate WP Mail
Application: Ultimate WP Mail
Published on: Sep 23, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rustaurius Ultimate WP Mail ultimate-wp-mail allows Stored XSS.This issue affects Ultimate WP Mail: from n/a through <= 1.3.8.
Affected versions: max 1.3.9.
Status: vulnerable