CyberSecBulletin

Mailgun vulnerabilities

We track 1 vulnerability in Mailgun products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 22, 2026.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Mailgun vulnerabilities

  • 9.8 Critical severity

    Mailgun for WordPress: Server-Side Request Forgery

    CVE-2026-78003Mailgun

    The Mailgun for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF) via path traversal in versions up to and including 2.2.0. This is due to insufficient input validation in the add_list() function, which accepts user-controlled