POST SMTP Mailer vulnerabilities
We track 2 vulnerabilities in POST SMTP Mailer products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 15, 2024.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest POST SMTP Mailer vulnerabilities
- 7.2 High severity
POST SMTP Mailer: Improper Neutralization of Special Elements used in an SQL Command
The POST SMTP Mailer WordPress plugin before 2.8.7 does not properly sanitise and escape several parameters before using them in SQL statements, leading to a SQL injection exploitable by high privilege users such as admin.
- 8.8 High severity
POST SMTP Mailer: Cross-Site Request Forgery
The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could allow attackers to make logged in users with the manage_postman_smtp capability resend an email to an arbitrary address (for example a passwor