A vulnerability marked as critical has been reported in WP Mail Logging Plugin up to 1.15.0 on WordPress. The affected element is the function
maybe_unserialize of the component Log Message Handler. The manipulation leads to deserialization.
This vulnerability is listed as CVE-2026-2471. The attack may be initiated remotely. There is no available exploit.