WordPress plugin
Email Template Designer – WP HTML Mail security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High2
- Medium2
- Low0
All Email Template Designer – WP HTML Mail vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Cross-Site Request Forgery via 'send_test' ≤3.4.0Update to 3.4.1 | CVE-2023-40202 | |
| High8.3 | Missing Authorization on Rest Route ≤3.0.9Update to 3.1 | CVE-2022-0218 | |
| High8.8 | Cross-Site Request Forgery <3.0.8Update to 3.0.8 | CVE-2021-20779 | |
| Medium6.1 | HTML Injection <2.9.1Update to 2.9.1 | CVE-2019-25148 |
- Medium4.3Cross-Site Request Forgery via 'send_test'
≤3.4.0Update to 3.4.1
- High8.3Missing Authorization on Rest Route
≤3.0.9Update to 3.1
- High8.8Cross-Site Request Forgery
<3.0.8Update to 3.0.8
- Medium6.1HTML Injection
<2.9.1Update to 2.9.1
Email Template Designer – WP HTML Mail: common questions
Does Email Template Designer – WP HTML Mail have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Email Template Designer – WP HTML Mail: 2 high, 2 medium. None are known to affect version null.
How do I check which version of Email Template Designer – WP HTML Mail I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Email Template Designer – WP HTML Mail vulnerability?
CVE-2023-40202, published Aug 11, 2023: WP HTML Mail <= 3.4.0 - Cross-Site Request Forgery via 'send_test'. Severity: Medium (CVSS 4.3).
Is any Email Template Designer – WP HTML Mail vulnerability listed in CISA KEV?
No. None of the known Email Template Designer – WP HTML Mail vulnerabilities is currently listed in the CISA KEV catalog.