FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, Mailgun, Postmark, Cloudflare, toSend, Gmail and Any SMTP vulnerabilities

Product

FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, Mailgun, Postmark, Cloudflare, toSend, Gmail and Any SMTP

by wpmanageninja · last CVE Aug 6, 2026

CVEs

On KEV

7.2

Max CVSS

New 30D

Vulnerabilities1 In the news0 Timeline

Severity mix

Critical 0High 1Medium 0Low 0

Severity

All severities1 Critical0 High1 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, Mailgun, Postmark, Cloudflare, toSend, Gmail and Any SMTP to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-16636	7.2	1%	Aug 6	FluentSMTP <= 2.2.95 - Unauthenticated Stored Cross-Site Scripting via Recipient Display Name (to.name) in Email Logs Affected: through 2.2.95