PS
Product
Post SMTP
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 7Medium 12Low 0
Watch
Add Post SMTP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-52233 | 9.8 | Jun 11 | WordPress POST SMTP Mailer plugin <= 2.8.6 - Broken Access Control on API vulnerability Affected: before 2.8.7 |
| CVE-2023-6875 | 9.8 | Jan 11 | POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Authorization Bypass via type connect-app API Affected: through 2.8.7 |
| CVE-2025-22800 | 8.8 | Jan 13 | WordPress Post SMTP plugin <= 2.9.11 - Broken Access Control vulnerability Affected: before 2.9.12 |
| CVE-2023-3179 | 8.8 | Jul 17 | The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could allow attackers to make logged in users with the… Affected: before 2.5.7 |
| CVE-2024-52436 | 7.2 | Nov 18 | WordPress Post SMTP plugin <= 2.9.9 - SQL Injection vulnerability Affected: through 2.9.9 |
| CVE-2024-5207 | 7.2 | May 30 | POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.9.3 - Authenticated (Administrator+) SQL Injection Affected: before 2.9.4 |
| CVE-2023-6620 | 7.2 | Jan 15 | Post SMTP < 2.8.7 - Admin+ SQL Injection Affected: before 2.8.7 |
| CVE-2022-2352 | 7.2 | Sep 26 | The Post SMTP Mailer/Email Log WordPress plugin before 2.1.7 does not have proper authorisation in some AJAX actions, which could allow high privilege users such as admin to… Affected: before 2.1.7 |
| CVE-2026-48838 | 7.1 | Jun 15 | WordPress Post SMTP plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability Affected: through 3.6.2 |
| CVE-2025-0521 | 6.1 | Feb 18 | Post SMTP <= 3.0.2 - Unauthenticated Stored Cross-Site Scripting Affected: before 3.1.0 |
| CVE-2024-29128 | 6.1 | Mar 19 | WordPress POST SMTP Mailer plugin <= 2.8.6 - Reflected Cross Site Scripting (XSS) vulnerability Affected: before 2.8.7 |
| CVE-2023-6621 | 6.1 | Jan 3 | Post SMTP < 2.8.7 - Reflected Cross-Site Scripting Affected: before 2.8.7 |
| CVE-2023-6629 | 6.1 | Jan 3 | POST SMTP Mailer <= 2.8.6 - Reflected Cross-Site Scripting via msg Affected: before 2.8.7 |
| CVE-2023-5958 | 6.1 | Nov 27 | POST SMTP Mailer < 2.7.1 - Unauthenticated Cross-site Scripting Affected: before 2.7.1 |
| CVE-2023-3082 | 6.1 | Jul 12 | The Post SMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 2.5.7 due to insufficient input sanitization… Affected: before 2.5.8 |
| CVE-2026-81278 | 5.4 | Aug 31 | WordPress Post SMTP plugin 4.0.0-beta.1 - Settings Change vulnerability Affected: 4.0.0 through beta.1 |
| CVE-2023-7027 | 5.4 | Jan 3 | POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Unauthenticated Stored Cross-Site Scripting via device Affected: before 2.8.8 |
| CVE-2024-13844 | 4.9 | Mar 8 | Post SMTP <= 3.1.2 - Authenticated (Administrator+) SQL Injection via columns Parameter Affected: before 3.1.3 |
| CVE-2022-2351 | 4.8 | Sep 16 | The Post SMTP Mailer/Email Log WordPress plugin before 2.1.4 does not escape some of its settings before outputting them in the admins dashboard, allowing high privilege users to… Affected: before 2.1.4 |
| CVE-2023-3178 | 4.3 | Jan 16 | POST SMTP Mailer < 2.5.7 - Arbitrary Log Deletion via CSRF Affected: before 2.5.7 |
| CVE-2021-4422 | 4.3 | Jul 12 | The POST SMTP Mailer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.20 Affected: through 2.0.20 |
Showing 21