PS
Product
Post SMTP
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 7Medium 12Low 0
Watch
Add Post SMTP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-22800 | 8.8 | Jan 13 | Missing Authorization vulnerability in Saad Iqbal Post SMTP post-smtp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post SMTP: from… Affected: before 2.9.12 |
| CVE-2023-3179 | 8.8 | Jul 17 | The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could allow attackers to make logged in users with the… Affected: before 2.5.7 |
| CVE-2024-52436 | 7.2 | Nov 18 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal Post SMTP post-smtp allows Blind SQL Injection.This issue affects… Affected: through 2.9.9 |
| CVE-2024-5207 | 7.2 | May 30 | The POST SMTP – The #1 WordPress SMTP Plugin with Advanced Email Logging and Delivery Failure Notifications plugin for WordPress is vulnerable to time-based SQL Injection via the… Affected: before 2.9.4 |
| CVE-2023-6620 | 7.2 | Jan 15 | The POST SMTP Mailer WordPress plugin before 2.8.7 does not properly sanitise and escape several parameters before using them in SQL statements, leading to a SQL injection… Affected: before 2.8.7 |
| CVE-2022-2352 | 7.2 | Sep 26 | The Post SMTP Mailer/Email Log WordPress plugin before 2.1.7 does not have proper authorisation in some AJAX actions, which could allow high privilege users such as admin to… Affected: before 2.1.7 |
| CVE-2026-48838 | 7.1 | Jun 15 | WordPress Post SMTP plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability Affected: through 3.6.2 |
Showing 7