CVE-2026-57322

Name of the Vulnerable Software and Affected Versions weMail versions prior to 2.1.3

Description The weMail – Email Marketing, Newsletter Builder & Email Automations for WooCommerce plugin for WordPress contains a Reflected Cross-Site Scripting (XSS) flaw. This issue occurs due to insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts into pages. The attack is executed if a user is tricked into performing an action, such as clicking a malicious link.

Recommendations Update the plugin to a version later than 2.1.2.