How many wpvibes wp mail log CVEs are in CISA KEV?

None of wpvibes wp mail log's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of wpvibes wp mail log are affected?

18 distinct wpvibes wp mail log versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in wpvibes wp mail log CVEs?

wpvibes wp mail log's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-434 (Unrestricted Upload of File with Dangerous Type).

How many critical wpvibes wp mail log vulnerabilities are there?

wpvibes wp mail log has 1 critical and 7 high-severity CVEs.

What is the average severity of wpvibes wp mail log CVEs?

The average CVSS base score across wpvibes wp mail log's scored CVEs is 8.2.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

wpvibes

9 CVEs

wpvibes wp mail log Vulnerabilities

Name: wpvibes wp mail log vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for wp mail log by wpvibes.

9

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

5

Public exploits

PoC or exploit code

8.2

Avg CVSS

2023–2026

Last updated June 11, 2026

Overview

wpvibes wp mail log has 9 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 5 have a known public exploit. The average CVSS base score across scored CVEs is 8.2.

This page aggregates every publicly disclosed vulnerability (CVE) affecting wpvibes wp mail log, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of wpvibes wp mail log's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High7

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of wpvibes wp mail log's CVEs are currently listed in CISA's KEV catalog.

Public exploits

5

5 of wpvibes wp mail log's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every wpvibes wp mail log version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.1.35 CVEs
< 1.0.21 CVE
< 1.1.21 CVE
<= 1.0.11 CVE
<= 1.0.21 CVE
<= 1.1.11 CVE
<= 1.1.21 CVE
>= 1.0.21 CVE
>= 1.1.11 CVE
>= 1.1.31 CVE

Fixed in

1.1.36 CVEs
> 1.0.11 CVE
> 1.0.21 CVE
> 1.1.11 CVE
> 1.1.21 CVE
1.0.21 CVE
1.1.11 CVE
1.1.21 CVE

Find a version

9 CVEs

Sort

WordPress WP Mail Log plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2023-33999
Patch
CWE-79
High · CVSS 7.1
EPSS 0.3% (25th pct)2026-06-11
WordPress WP Mail Log Plugin <= 1.1.2 is vulnerable to Arbitrary File Upload
CVE-2023-51410
Patch
CWE-434
Critical · CVSS 9.9
EPSS 0.6% (45th pct)2023-12-29
Medium vulnerability · 2023-12-26
CVE-2023-5672
Public exploit
Patch
Medium · CVSS 6.5
EPSS 0.7% (50th pct)2023-12-26
High vulnerability · 2023-12-26
CVE-2023-5644
Public exploit
Patch
High · CVSS 7.6
EPSS 0.5% (40th pct)2023-12-26
High vulnerability · 2023-12-26
CVE-2023-5645
Public exploit
Patch
High · CVSS 8.8
EPSS 0.7% (50th pct)2023-12-26
High vulnerability · 2023-12-26
CVE-2023-5673
Public exploit
Patch
High · CVSS 8.8
EPSS 1.1% (62th pct)2023-12-26
WP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs/send_mail endpoint
CVE-2023-5674
Public exploit
Patch
High · CVSS 8.8
EPSS 10.8% (95th pct)2023-12-26
WP Mail Log <= 1.1.1 - Unauthenticated Stored Cross-Site Scripting via Email
CVE-2023-3088
Patch
CWE-79
High · CVSS 7.2
EPSS 0.5% (38th pct)2023-07-12
WordPress WP Mail Log Plugin <= 1.0.1 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2022-45807
Patch
CWE-352
High · CVSS 8.8
EPSS 0.3% (18th pct)2023-02-02

Common weakness types

The CWE weakness categories most often found in wpvibes wp mail log CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many wpvibes wp mail log CVEs were published each year.

2023

8

2026

1

Other wpvibes products

Browse vulnerabilities for other products by wpvibes.

Addon Elements for Elementor (formerly Elementor Addon Elements)21 CVEs Elementor Addon Elements5 CVEs Form Vibes – Database Manager for Forms5 CVEs form vibes3 CVEs anywhere elementor2 CVEs Dynific Addons for Elementor (formerly AnyWhere Elementor)2 CVEs redirect 404 error page to homepage or custom page with logs2 CVEs AnyWhere Elementor Pro1 CVEs

All wpvibes vulnerabilities

Frequently asked questions

Common questions about wpvibes wp mail log vulnerabilities.

How many CVEs does wpvibes wp mail log have?: wpvibes wp mail log has 9 published CVE records since 2023.
How many wpvibes wp mail log CVEs are in CISA KEV?: None of wpvibes wp mail log's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for wpvibes wp mail log vulnerabilities?: Yes — 5 of wpvibes wp mail log's CVEs have a known public exploit.
Which versions of wpvibes wp mail log are affected?: 18 distinct wpvibes wp mail log versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in wpvibes wp mail log CVEs?: wpvibes wp mail log's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-434 (Unrestricted Upload of File with Dangerous Type).
How many critical wpvibes wp mail log vulnerabilities are there?: wpvibes wp mail log has 1 critical and 7 high-severity CVEs.
What is the average severity of wpvibes wp mail log CVEs?: The average CVSS base score across wpvibes wp mail log's scored CVEs is 8.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track wpvibes wp mail log vulnerabilities

Monitor new wpvibes wp mail log vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing