Known Vulnerabilities for WP Mail Log by WPVibes
Listed below are 8 of the newest known vulnerabilities associated with "WP Mail Log" by "WPVibes".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-94611 json | authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, authentik API serializers return st... | Not Provided | 2026-09-24 | 2026-09-24 |
| CVE-2026-94184 json | A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail serve... | Not Provided | 2026-09-21 | 2026-09-23 |
| CVE-2026-93259 json | In the Linux kernel, the following vulnerability has been resolved: powerpc/irq: Fix missing r2 clobber in PCREL inline asse... | Not Provided | 2026-09-24 | 2026-09-24 |
| CVE-2026-92597 json | Nodemailer versions >= 6.9.16 and < 9.1.0 mis-parse RFC 5322 comments in email addresses: in lib/addressparser, a comment clo... | Not Provided | 2026-09-16 | 2026-09-17 |
| CVE-2026-92595 json | Nodemailer (npm package `nodemailer`) versions 9.1.0 and earlier do not honor the `disableFileAccess` and `disableUrlAccess` ... | Not Provided | 2026-09-16 | 2026-09-19 |
| CVE-2026-92455 json | yshop-crm through 2.1.3 fails to enforce authorization on the sendSms and sendMail endpoints in CrmCustomerController, allowi... | Not Provided | 2026-09-16 | 2026-09-17 |
| CVE-2026-92238 json | A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violation... | Not Provided | 2026-09-15 | 2026-09-22 |
| CVE-2026-91145 json | Activiti through 7.1.0.M6 fails to validate hash-brace deferred expressions in process variables, allowing attackers to bypas... | Not Provided | 2026-09-14 | 2026-09-24 |
| CVE-2026-91127 json | File Viewer is a browser-native viewer for Office, PDF, CAD, archive, and other files in private and internal web application... | Not Provided | 2026-09-18 | 2026-09-22 |
| CVE-2026-90944 json | Krayin CRM through 2.2.6 exposes the POST /admin/mail/inbound-parse endpoint without authentication, allowing unauthenticated... | Not Provided | 2026-09-14 | 2026-09-24 |