CVE-2025-47540: WordPress weMail plugin <= 1.14.13 - Sensitive Data Exposure Vulnerability
Published May 7, 2025
·Updated
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs weMail wemail allows Retrieve Embedded Sensitive Data.This issue affects weMail: from n/a through <= 1.14.13.
Affected Software
3 affected components
weDevs weMail<=1.14.13
WordPress weMail<=1.14.13
weDevs Wemail Wordpress<1.14.14
Remediation
Information
Update the WordPress weMail plugin to the latest available version (at least 1.14.14).
Event History
May 7, 2025
CVE Published
via MITRE·02:20 PM
Data Sourced
via MITRE·02:20 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-47540?
CVE-2025-47540 is classified as a high severity vulnerability that exposes sensitive system information.
2
How do I fix CVE-2025-47540?
To fix CVE-2025-47540, update weMail to a version higher than 1.14.13.
3
What kind of data is exposed in CVE-2025-47540?
CVE-2025-47540 allows for the retrieval of embedded sensitive data within weMail.
4
Which versions of weMail are affected by CVE-2025-47540?
CVE-2025-47540 affects all versions of weMail up to and including 1.14.13.
5
Who is impacted by CVE-2025-47540?
Any user of weMail versions up to 1.14.13 is impacted by CVE-2025-47540 due to the risk of sensitive data exposure.