CVE-2026-6963 | shahariaazam WP Mail Gateway Plugin up to 1.8 on WordPress Setting wmg_save_provider_config authorization

A vulnerability was found in shahariaazam WP Mail Gateway Plugin up to 1.8 on WordPress. It has been rated as critical. Affected by this issue is the function wmg_save_provider_config of the component Setting Handler. Performing a manipulation results in missing authorization.

This vulnerability is identified as CVE-2026-6963. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.