CVE-2025-47466: WordPress Ultimate WP Mail plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in Rustaurius Ultimate WP Mail allows Cross Site Request Forgery. This issue affects Ultimate WP Mail: from n/a through 1.3.4.
Other sources
Cross-Site Request Forgery (CSRF) vulnerability in Rustaurius Ultimate WP Mail ultimate-wp-mail allows Cross Site Request Forgery.This issue affects Ultimate WP Mail: from n/a through <= 1.3.4.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47466?
CVE-2025-47466 is classified as a medium severity Cross-Site Request Forgery (CSRF) vulnerability.
How do I fix CVE-2025-47466?
To fix CVE-2025-47466, update the Rustaurius Ultimate WP Mail plugin to version 1.3.5 or later.
Who is affected by CVE-2025-47466?
CVE-2025-47466 affects users of the Rustaurius Ultimate WP Mail plugin version 1.3.4 and earlier.
What type of vulnerability is CVE-2025-47466?
CVE-2025-47466 is a Cross-Site Request Forgery (CSRF) vulnerability.
Can CVE-2025-47466 be exploited remotely?
Yes, CVE-2025-47466 can be exploited remotely by an attacker to perform unauthorized actions on behalf of a user.