181 matches found
CVE-2026-102094
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Unsafe Reflection and does not sufficiently restrict the code that the mail-processing pipeline could load from an imported rule configuration. An authenticated administrator with mail-rule configuration privileges could cau...
PT-2026-103532
Name of the Vulnerable Software and Affected Versions Kiteworks Email Protection Gateway versions prior to 9.5.0 Description The software is subject to Unsafe Reflection, a condition where an application allows the loading of classes or methods dynamically without sufficient validation. This occu...
WordPress WP Mail Gateway plugin <= 1.8 - Missing Authorization to Authenticated (Subscriber+) SMTP Configuration Modification vulnerability
Missing Authorization to Authenticated Subscriber+ SMTP Configuration Modification vulnerability discovered by Nabil Irawan - Heroes Cyber Security in WordPress Plugin WP Mail Gateway versions = 1.8...
CVE-2026-6963
The WP Mail Gateway plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wmgsaveproviderconfig AJAX action in all versions up to, and including, 1.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update...
CVE-2026-6963
The WP Mail Gateway plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wmgsaveproviderconfig AJAX action in all versions up to, and including, 1.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update...
EUVD-2026-26736
The WP Mail Gateway plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wmgsaveproviderconfig AJAX action in all versions up to, and including, 1.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update...
CVE-2026-6963 WP Mail Gateway <= 1.8 - Missing Authorization to Authenticated (Subscriber+) SMTP Configuration Modification via 'wmg_save_provider_config' AJAX Action
The WP Mail Gateway plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wmgsaveproviderconfig AJAX action in all versions up to, and including, 1.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update...
CVE-2026-6963
The WP Mail Gateway plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wmgsaveproviderconfig AJAX action in all versions up to, and including, 1.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update...
CVE-2026-6963 WP Mail Gateway <= 1.8 - Missing Authorization to Authenticated (Subscriber+) SMTP Configuration Modification via 'wmg_save_provider_config' AJAX Action
The WP Mail Gateway plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wmgsaveproviderconfig AJAX action in all versions up to, and including, 1.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update...
PT-2026-36568
Name of the Vulnerable Software and Affected Versions WP Mail Gateway versions prior to 1.9 Description The plugin is subject to unauthorized access because of a missing capability check on the 'wmg save provider config' AJAX action. Authenticated attackers with Subscriber-level access or higher...
WordPress plugin WP Mail Gateway 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
CVE-2026-6963: Missing Authorization
The WP Mail Gateway plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wmgsaveproviderconfig AJAX action in all versions up to, and including, 1.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update...
A Lightweight Defense Mechanism against Next Generation of Phishing Emails Using Distilled Attention-Augmented BiLSTM
The current generation of large language models produces sophisticated social-engineering content that bypasses standard text screening systems in business communication platforms. Our proposed solution for mail gateway and endpoint deception detection operates in a privacy-protective manner whil...
The vulnerability of Proxmox Mail Gateway’s security mechanism, which stems from insufficient validation of input data, allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of Proxmox Mail Gateway, a security tool for email protection, is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality and integrity of the protected information...
The vulnerability of Proxmox Mail Gateway’s security mechanism, which stems from insufficient validation of input data, allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of Proxmox Mail Gateway, a security tool for email communication, is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality and integrity of the protected information...
The vulnerability of Proxmox Mail Gateway’s security mechanism, which stems from insufficient validation of input data, allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of Proxmox Mail Gateway, a security tool for email protection, is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality and integrity of the protected information...
The vulnerability of Proxmox Mail Gateway’s security mechanism, which stems from insufficient validation of input data, allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of Proxmox Mail Gateway, a security tool for email protection, is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality and integrity of the protected information...
Kaspesky Secure Mail Gateway (Positive Results) (No. 9 dated January 27, 2026, 17:48:47)
...