PS
Product
Post SMTP
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 7Medium 12Low 0
Watch
Add Post SMTP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-52233 | 9.8 | Jun 11 | Missing Authorization vulnerability in Post SMTP Post SMTP Mailer/Email Log.This issue affects Post SMTP Mailer/Email Log: from n/a through 2.8.6 Affected: before 2.8.7 |
| CVE-2023-6875 | 9.8 | Jan 11 | The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerable to unauthorized access of data and… Affected: through 2.8.7 |
| CVE-2025-22800 | 8.8 | Jan 13 | Missing Authorization vulnerability in Saad Iqbal Post SMTP post-smtp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post SMTP: from… Affected: before 2.9.12 |
| CVE-2023-3179 | 8.8 | Jul 17 | The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could allow attackers to make logged in users with the… Affected: before 2.5.7 |
| CVE-2024-52436 | 7.2 | Nov 18 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal Post SMTP post-smtp allows Blind SQL Injection.This issue affects… Affected: through 2.9.9 |
| CVE-2024-5207 | 7.2 | May 30 | The POST SMTP – The #1 WordPress SMTP Plugin with Advanced Email Logging and Delivery Failure Notifications plugin for WordPress is vulnerable to time-based SQL Injection via the… Affected: before 2.9.4 |
| CVE-2023-6620 | 7.2 | Jan 15 | The POST SMTP Mailer WordPress plugin before 2.8.7 does not properly sanitise and escape several parameters before using them in SQL statements, leading to a SQL injection… Affected: before 2.8.7 |
| CVE-2022-2352 | 7.2 | Sep 26 | The Post SMTP Mailer/Email Log WordPress plugin before 2.1.7 does not have proper authorisation in some AJAX actions, which could allow high privilege users such as admin to… Affected: before 2.1.7 |
| CVE-2026-48838 | 7.1 | Jun 15 | WordPress Post SMTP plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability Affected: through 3.6.2 |
| CVE-2025-0521 | 6.1 | Feb 18 | The Post SMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the from and subject parameter in all versions up to, and including, 3.0.2 due to insufficient… Affected: before 3.1.0 |
| CVE-2024-29128 | 6.1 | Mar 19 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Post SMTP POST SMTP allows Reflected XSS.This issue affects POST SMTP: from… Affected: before 2.8.7 |
| CVE-2023-6621 | 6.1 | Jan 3 | The POST SMTP WordPress plugin before 2.8.7 does not sanitise and escape the msg parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which… Affected: before 2.8.7 |
| CVE-2023-6629 | 6.1 | Jan 3 | The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the… Affected: before 2.8.7 |
| CVE-2023-5958 | 6.1 | Nov 27 | The POST SMTP Mailer WordPress plugin before 2.7.1 does not escape email message content before displaying it in the backend, allowing an unauthenticated attacker to perform XSS… Affected: before 2.7.1 |
| CVE-2023-3082 | 6.1 | Jul 12 | The Post SMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 2.5.7 due to insufficient input sanitization… Affected: before 2.5.8 |
| CVE-2026-81278 | 5.4 | Aug 31 | WordPress Post SMTP plugin 4.0.0-beta.1 - Settings Change vulnerability Affected: 4.0.0 through beta.1 |
| CVE-2023-7027 | 5.4 | Jan 3 | The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 2.8.8 |
| CVE-2024-13844 | 4.9 | Mar 8 | The Post SMTP plugin for WordPress is vulnerable to generic SQL Injection via the ‘columns’ parameter in all versions up to, and including, 3.1.2 due to insufficient escaping on… Affected: before 3.1.3 |
| CVE-2022-2351 | 4.8 | Sep 16 | The Post SMTP Mailer/Email Log WordPress plugin before 2.1.4 does not escape some of its settings before outputting them in the admins dashboard, allowing high privilege users to… Affected: before 2.1.4 |
| CVE-2023-3178 | 4.3 | Jan 16 | The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could allow attackers to make logged in users with the… Affected: before 2.5.7 |
| CVE-2021-4422 | 4.3 | Jul 12 | The POST SMTP Mailer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.20 Affected: through 2.0.20 |
Showing 21