Login Request a demo
FL
Product
Fluentsmtp
by Wpmanageninja · last CVE Nov 23, 2024
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 0Medium 3Low 0
Severity
All severities4Critical1High0Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Fluentsmtp to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-9511
9.8
1%
Nov 23
FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider <= 2.2.82 - Unauthenticated PHP Object Injection
Affected: through 2.2.82
CVE-2023-3087
6.1
1%
Jul 12
The FluentSMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 2.2.4 due to insufficient input…
Affected: before 2.2.5
CVE-2023-0219
5.4
1%
Mar 13
The FluentSMTP WordPress plugin before 2.2.3 does not sanitize or escape email content, making it vulnerable to stored cross-site scripting attacks (XSS) when an administrator…
Affected: before 2.2.3
CVE-2021-24528
5.4
1%
Aug 30
The FluentSMTP WordPress plugin before 2.0.1 does not sanitize parameters before storing the settings in the database, nor does the plugin escape the values before outputting them…
Affected: before 2.0.1
Showing 4