Ultimate WP Mail

1.3.6 Missing Authorization to Authenticated (Contributor+) Privilege Escalation via get_email_log_details Function vulnerability 1.0.17 - 1.3.6

Account Takeover via Email Log Leak Vulnerability <= 1.3.5

SQL Injection Vulnerability <= 1.3.4

Cross Site Request Forgery (CSRF) Vulnerability <= 1.3.4

Open Redirection Vulnerability <= 1.3.7