WP Mail Logging vulnerabilities

1 known vulnerability in WP Mail Logging from Smub. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  WP Mail Logging: Deserialization of Untrusted Data

  CVE-2026-2471Feb 28, 2026Smub

  The WP Mail Logging plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.15.0 via deserialization of untrusted input from the email log message field. This is due to the `BaseModel` class constructor calling `maybe