PS
Product
Post SMTP
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 7Medium 12Low 0
Watch
Add Post SMTP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-0521 | 6.1 | Feb 18 | The Post SMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the from and subject parameter in all versions up to, and including, 3.0.2 due to insufficient… Affected: before 3.1.0 |
| CVE-2024-29128 | 6.1 | Mar 19 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Post SMTP POST SMTP allows Reflected XSS.This issue affects POST SMTP: from… Affected: before 2.8.7 |
| CVE-2023-6621 | 6.1 | Jan 3 | The POST SMTP WordPress plugin before 2.8.7 does not sanitise and escape the msg parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which… Affected: before 2.8.7 |
| CVE-2023-6629 | 6.1 | Jan 3 | The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the… Affected: before 2.8.7 |
| CVE-2023-5958 | 6.1 | Nov 27 | The POST SMTP Mailer WordPress plugin before 2.7.1 does not escape email message content before displaying it in the backend, allowing an unauthenticated attacker to perform XSS… Affected: before 2.7.1 |
| CVE-2023-3082 | 6.1 | Jul 12 | The Post SMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 2.5.7 due to insufficient input sanitization… Affected: before 2.5.8 |
| CVE-2026-81278 | 5.4 | Aug 31 | WordPress Post SMTP plugin 4.0.0-beta.1 - Settings Change vulnerability Affected: 4.0.0 through beta.1 |
| CVE-2023-7027 | 5.4 | Jan 3 | The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 2.8.8 |
| CVE-2024-13844 | 4.9 | Mar 8 | The Post SMTP plugin for WordPress is vulnerable to generic SQL Injection via the ‘columns’ parameter in all versions up to, and including, 3.1.2 due to insufficient escaping on… Affected: before 3.1.3 |
| CVE-2022-2351 | 4.8 | Sep 16 | The Post SMTP Mailer/Email Log WordPress plugin before 2.1.4 does not escape some of its settings before outputting them in the admins dashboard, allowing high privilege users to… Affected: before 2.1.4 |
| CVE-2023-3178 | 4.3 | Jan 16 | The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could allow attackers to make logged in users with the… Affected: before 2.5.7 |
| CVE-2021-4422 | 4.3 | Jul 12 | The POST SMTP Mailer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.20 Affected: through 2.0.20 |
Showing 12