wedevs Vulnerabilities and Affected Products
Vulnerabilities associated with weMail.
Products
Clear product- Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker11 vulnerabilities
- WP User Frontend9 vulnerabilities
- ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support8 vulnerabilities
- WP ERP8 vulnerabilities
- WP Project Manager7 vulnerabilities
- Dokan Pro6 vulnerabilities
- weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot6 vulnerabilities
- User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration5 vulnerabilities
- weMail4 vulnerabilities
- wp_erp4 vulnerabilities
- ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce3 vulnerabilities
- Happy Addons for Elementor3 vulnerabilities
- StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce3 vulnerabilities
- Subscribe2 – Form, Email Subscribers & Newsletters3 vulnerabilities
- User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration3 vulnerabilities
- WooCommerce Conversion Tracking3 vulnerabilities
- wp_project_manager3 vulnerabilities
- Appsero Helper2 vulnerabilities
- Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy2 vulnerabilities
- ReCaptcha Integration for WordPress2 vulnerabilities
- weDocs2 vulnerabilities
- weMail: Email Marketing, Email Automation, Newsletters, Subscribers & Email Optins for WooCommerce2 vulnerabilities
- woocommerce_conversion_tracking2 vulnerabilities
- WP User Frontend Pro2 vulnerabilities
- wp_user_frontend2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-57322HIGH | WordPress weMail plugin <= 2.1.2 - Reflected Cross Site Scripting (XSS) vulnerabilityUnauthenticated Cross Site Scripting (XSS) in weMail <= 2.1.2 versions. CWE-79Jun 26, 2026 | CVSS7.1v3.1 | EPSS0.175% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-47540MEDIUM | WordPress weMail plugin <= 1.14.13 - Sensitive Data Exposure VulnerabilityExposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs weMail wemail allows Retrieve Embedded Sensitive Data.This issue affects weMail: from n/a through <= 1.14.13. CWE-497May 7, 2025 | CVSS5.3v3.1 | EPSS0.394% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-43238HIGH | WordPress weMail plugin <= 1.14.5 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs weMail wemail allows DOM-Based XSS.This issue affects weMail: from n/a through <= 1.14.5. CWE-79Aug 18, 2024 | CVSS7.1v3.1 | EPSS0.308% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-34822MEDIUM | WordPress weMail plugin <= 1.14.2 - Broken Access Control vulnerabilityMissing Authorization vulnerability in weDevs weMail.This issue affects weMail: from n/a through 1.14.2. CWE-862Jun 11, 2024 | CVSS5.3v3.1 | EPSS0.381% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |