Radar sectionsPlugins & themes
Check my site

WordPress plugin

Mail logging & Catcher security & vulnerabilities

wp-mail-catcher— active installsLast vulnerability Oct 30, 2026

No known unpatched vulnerabilities in the latest version

All 7 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

7Known vulnerabilities
  • Critical0
  • High4
  • Medium3
  • Low0
Vulnerabilities per year
2023: 3 vulnerabilities3232024: 2 vulnerabilities2242026: 2 vulnerabilities226

All Mail logging & Catcher vulnerabilities

Nothing in this view

No vulnerabilities match this filter. Show all.

Mail logging & Catcher: common questions

Does Mail logging & Catcher have known vulnerabilities?

Yes. VulnCrest Radar lists 7 known vulnerabilities in Mail logging & Catcher: 4 high, 3 medium. None are known to affect version null.

How do I check which version of Mail logging & Catcher I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Mail logging & Catcher vulnerability?

CVE-2026-120040, published Oct 30, 2026: Mail logging & Catcher <= 2.2.0 - Authenticated (Subscriber+) Sensitive Information Exposure to Privilege Escalation to Mail Log Viewer / Password-Reset Email Disclosure. Severity: High (CVSS 7.5).

Is any Mail logging & Catcher vulnerability listed in CISA KEV?

No. None of the known Mail logging & Catcher vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Are you sure?