Login Request a demo
PS
Product
Post SMTP
by WPExperts · last CVE Aug 31, 2026
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities21In the news0Timeline
Severity mix
Critical 2High 7Medium 12Low 0
Severity
All severities21Critical2High7Medium12Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Post SMTP to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-0521
6.1
0%
Feb 18
Post SMTP <= 3.0.2 - Unauthenticated Stored Cross-Site Scripting
Affected: before 3.1.0
CVE-2024-29128
6.1
0%
Mar 19
WordPress POST SMTP Mailer plugin <= 2.8.6 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: before 2.8.7
CVE-2023-6621
6.1
0%
Jan 3
Post SMTP < 2.8.7 - Reflected Cross-Site Scripting
Affected: before 2.8.7
CVE-2023-6629
6.1
0%
Jan 3
POST SMTP Mailer <= 2.8.6 - Reflected Cross-Site Scripting via msg
Affected: before 2.8.7
CVE-2023-5958
6.1
1%
Nov 27
POST SMTP Mailer < 2.7.1 - Unauthenticated Cross-site Scripting
Affected: before 2.7.1
CVE-2023-3082
6.1
0%
Jul 12
Post SMTP <= 2.5.7 - Unauthenticated Stored Cross-Site Scripting via Email
Affected: before 2.5.8
CVE-2026-81278
5.4
0%
Aug 31
WordPress Post SMTP plugin 4.0.0-beta.1 - Settings Change vulnerability
Affected: 4.0.0 through beta.1
CVE-2023-7027
5.4
1%
Jan 3
POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Unauthenticated Stored Cross-Site Scripting via device
Affected: before 2.8.8
CVE-2024-13844
4.9
0%
Mar 8
Post SMTP <= 3.1.2 - Authenticated (Administrator+) SQL Injection via columns Parameter
Affected: before 3.1.3
CVE-2022-2351
4.8
1%
Sep 16
Post SMTP < 2.1.4 - Admin+ Stored Cross-Site Scripting
Affected: before 2.1.4
CVE-2023-3178
4.3
0%
Jan 16
POST SMTP Mailer < 2.5.7 - Arbitrary Log Deletion via CSRF
Affected: before 2.5.7
CVE-2021-4422
4.3
1%
Jul 12
POST SMTP Mailer <= 2.0.20 - Cross-Site Request Forgery Bypass
Affected: through 2.0.20
Showing 12