CVE-2025-47540

High CVSS: 7.5

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs weMail wemail allows Retrieve Embedded Sensitive Data.This issue affects weMail: from n/a through <= 1.14.13.

Vendor

Wedevs

Product

Wemail

CWE

CWE-497

Yayın Tarihi

2025-05-07 15:16:10

Güncelleme

2026-04-01 17:24:01

Source Identifier

audit@patchstack.com

KEV Date Added

Kategoriler

CWE-497 Wemail HIGH Wedevs 2025

Referanslar

https://patchstack.com/database/Wordpress/Plugin/wemail/vulnerability/wordpress-wemail-1-14-13-sensitive-data-exposure-vulnerability?_s_id=cve

Benzer Kayıtlar

Medium

CVE-2024-12808

The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting WordPress plugin before…

High

CVE-2024-12812

The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting WordPress plugin before…

Medium

CVE-2025-2541

The WP Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all ver…

Medium

CVE-2025-3100

The WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts plugin for Wo…

High

CVE-2025-32280

Cross-Site Request Forgery (CSRF) vulnerability in weDevs WP Project Manager wedevs-project-manager allows Cross Site Re…

Medium

CVE-2025-22649

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs WP Project…