weMail: Email Marketing, Email Automation, Newsletters, Subscribers & Email Optins for WooCommerce vulnerabilities

Product

weMail: Email Marketing, Email Automation, Newsletters, Subscribers & Email Optins for WooCommerce

by wedevs · last CVE Feb 21, 2026

CVEs

On KEV

6.5

Max CVSS

New 30D

Vulnerabilities2 In the news0 Timeline

Severity mix

Critical 0High 0Medium 2Low 0

Severity

All severities2 Critical0 High0 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add weMail: Email Marketing, Email Automation, Newsletters, Subscribers & Email Optins for WooCommerce to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-14339	6.5	0%	Feb 21	weMail <= 2.0.7 - Missing Authorization to Unauthenticated Form Deletion Affected: through 2.0.7
CVE-2025-14348	5.3	0%	Jan 20	weMail <= 2.0.7 - Insufficient Authorization via x-wemail-user Header to Sensitive Information Disclosure Affected: through 2.0.7