weMail – Email Marketing, Newsletters Builder & Email Automations for WooCommerce

weMail – Email Marketing, Newsletters Builder & Email Automations for WooCommerce has 9 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; all 9 are fixed as of October 2026. Their average CVSS score is 5.5, and the most serious one scores 6.5 out of 10. 2026 was the busiest year with 4 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (33%). Other recurring categories include Missing Authorization, Cross-Site Request Forgery (CSRF).

Every one of the 9 issues recorded for weMail – Email Marketing, Newsletters Builder & Email Automations for WooCommerce has a vendor fix available, so running the current release closes all known holes.

7 independent researchers contributed these findings, most of them (2) reported by shark3y.