WordPress Mail logging & Catcher plugin <= 2.1.12 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Adrien Brunner in WordPress Plugin WP Mail Catcher versions = 2.1.12...

CVE-2026-93889

The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PHPMailer 'wpmailfailed' Error Message in all versions up to, and including, 2.1.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2026-93889

The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.1.12 . The root cause is insufficient input sanitization and output escaping within the PHPMailer 'wp_mail_failed' error message. An unauthenticated att...

EUVD-2026-91957

The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PHPMailer 'wpmailfailed' Error Message in all versions up to, and including, 2.1.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2026-93889 Mail logging <= 2.1.12 - Unauthenticated Stored Cross-Site Scripting via PHPMailer 'wp_mail_failed' Error Message

The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PHPMailer 'wpmailfailed' Error Message in all versions up to, and including, 2.1.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2026-93889: Improper Neutralization of Input During Web Page Generation

The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PHPMailer 'wpmailfailed' Error Message in all versions up to, and including, 2.1.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

EUVD-2024-42375

Malicious code in bioql PyPI...

EUVD-2023-55577

Malicious code in bioql PyPI...

EUVD-2024-29921

Malicious code in bioql PyPI...

EUVD-2023-43771

Malicious code in bioql PyPI...

CVE-2024-32099

Cross-Site Request Forgery CSRF vulnerability in James Ward WP Mail Catcher.This issue affects WP Mail Catcher: from n/a through 2.1.6...

CVE-2023-3080

The WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 2.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

CVE-2024-47339

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JWardee WP Mail Catcher wp-mail-catcher allows Reflected XSS.This issue affects WP Mail Catcher: from n/a through = 2.1.9...

CVE-2024-47339

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JWardee WP Mail Catcher wp-mail-catcher allows Reflected XSS.This issue affects WP Mail Catcher: from n/a through = 2.1.9...

CVE-2024-47339

CVE-2024-47339 is a WordPress WP Mail Catcher vulnerability: an improper input neutralization during page generation enables Reflected XSS in WP Mail Catcher versions = 2.1.10 to mitigate the issue. If upgrading is not immediately feasible, applying mitigations that block or sanitize user-supplie...

CVE-2024-47339: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JWardee WP Mail Catcher wp-mail-catcher allows Reflected XSS.This issue affects WP Mail Catcher: from n/a through = 2.1.9...

WordPress WP Mail Catcher plugin <= 2.1.9 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin WP Mail Catcher versions = 2.1.9...

WP Mail Catcher < 2.1.7 - Cross-Site Request Forgery

Description The WP Mail Catcher plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1.6. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to perform unauthorized actions...

CVE-2024-32099

Cross-Site Request Forgery CSRF vulnerability in James Ward WP Mail Catcher.This issue affects WP Mail Catcher: from n/a through 2.1.6...

CVE-2024-32099 WordPress WP Mail Catcher plugin <= 2.1.6 - Cross Site Request Forgery vulnerability

Cross-Site Request Forgery CSRF vulnerability in James Ward WP Mail Catcher.This issue affects WP Mail Catcher: from n/a through 2.1.6...