GoSMTP vulnerabilities
We track 1 vulnerability in GoSMTP products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 28, 2026.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest GoSMTP vulnerabilities
- 7.2 High severity
GoSMTP: Improper Privilege Management
The GoSMTP WordPress plugin before 1.2.5 does not perform a settings-management authorization check on its SMTP configuration page, which is gated only on the GoSMTP WordPress plugin before 1.2.5-activation capability, allowing users with a delegated role belo