CyberSecBulletin

Wardee vulnerabilities

We track 2 vulnerabilities in Wardee products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 31, 2026.

2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score

Latest Wardee vulnerabilities

  • 7.5 High severity

    Mail logging & Catcher: Improper Privilege Management

    CVE-2026-120040Wardee

    The Mail logging & Catcher plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.0 via the 'message' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above,

  • 7.2 High severity

    Mail logging & Catcher: Improper Neutralization of Input During Web Page Generation

    CVE-2026-93889Wardee

    The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PHPMailer 'wp_mail_failed' Error Message in all versions up to, and including, 2.1.12 due to insufficient input sanitization and output escaping. This make