CyberSecBulletin

AWEOS vulnerabilities

We track 2 vulnerabilities in AWEOS products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 15, 2025.

2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score

Latest AWEOS vulnerabilities

  • 8.8 High severity

    Email Notifications for Updates: Missing Authorization

    CVE-2025-26741AWEOS

    Missing Authorization vulnerability in AWEOS GmbH Email Notifications for Updates wp-update-mail-notification allows Privilege Escalation.This issue affects Email Notifications for Updates: from n/a through <= 1.1.6.

  • 8.8 High severity

    Email Notifications for Updates: Missing Authorization

    CVE-2025-2933AWEOS

    The Email Notifications for Updates plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the awun_import_settings() function in all versions up to, and including, 1.1