Approved changes feed: RSS · Atom

cpe:2.3:a:pickplugins:mail_picker:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPickplugins (03c448d6-40a7-5ce8-8d7e-bbbe6a0aa644)
ProductMail Picker (0f3c4322-9ca0-552d-8c7b-a2c285118500)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-54273 vulnerable 2026-06-03 14:57:41.058964 WordPress Mail Picker plugin <= 1.0.14 - PHP Object Injection vulnerability
CRITICAL (9.8)
Deserialization of Untrusted Data vulnerability in PickPlugins Mail Picker mail-picker allows Object Injection.This issue affects Mail Picker: from n/a through <= 1.0.14.
Published: 2024-12-13T14:24:48.718Z
Updated: 2026-04-28T16:10:48.564Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-53772 vulnerable 2026-06-03 14:57:40.188311 WordPress Mail Picker plugin <= 1.0.15 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Mail Picker mail-picker allows DOM-Based XSS.This issue affects Mail Picker: from n/a through <= 1.0.15.
Published: 2024-11-30T21:24:29.463Z
Updated: 2026-04-28T16:10:46.019Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.