Login Request a demo
PS
Product
Post SMTP
by WPExperts · last CVE Aug 31, 2026
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities21In the news0Timeline
Severity mix
Critical 2High 7Medium 12Low 0
Severity
All severities21Critical2High7Medium12Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Post SMTP to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-22800
8.8
0%
Jan 13
WordPress Post SMTP plugin <= 2.9.11 - Broken Access Control vulnerability
Affected: before 2.9.12
CVE-2023-3179
8.8
0%
Jul 17
The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could allow attackers to make logged in users with the…
Affected: before 2.5.7
CVE-2024-52436
7.2
0%
Nov 18
WordPress Post SMTP plugin <= 2.9.9 - SQL Injection vulnerability
Affected: through 2.9.9
CVE-2024-5207
7.2
0%
May 30
POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.9.3 - Authenticated (Administrator+) SQL Injection
Affected: before 2.9.4
CVE-2023-6620
7.2
14%
Jan 15
Post SMTP < 2.8.7 - Admin+ SQL Injection
Affected: before 2.8.7
CVE-2022-2352
7.2
1%
Sep 26
The Post SMTP Mailer/Email Log WordPress plugin before 2.1.7 does not have proper authorisation in some AJAX actions, which could allow high privilege users such as admin to…
Affected: before 2.1.7
CVE-2026-48838
7.1
0%
Jun 15
WordPress Post SMTP plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability
Affected: through 3.6.2
Showing 7