FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider vulnerabilities

Product

FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider

by techjewel · last CVE Nov 23, 2024

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities2 In the news0 Timeline

Severity mix

Critical 1High 0Medium 1Low 0

Severity

All severities2 Critical1 High0 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-9511	9.8	1%	Nov 23	FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider <= 2.2.82 - Unauthenticated PHP Object Injection Affected: through 2.2.82
CVE-2023-3087	6.1	1%	Jul 12	FluentSMTP <= 2.2.4 - Unauthenticated Stored Cross-Site Scripting via Email Subject Affected: through 2.2.4