Post Smtp vulnerabilities
5 known vulnerabilities in Post Smtp from Wpexperts. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
Post SMTP – Complete Email Deliverability and…: Improper Neutralization of Special Elements used in an SQL Command
The POST SMTP – The #1 WordPress SMTP Plugin with Advanced Email Logging and Delivery Failure Notifications plugin for WordPress is vulnerable to time-based SQL Injection via the selected parameter in all versions up to, and including, 2.9.3 due to insufficien
- 7.2 High severity
POST SMTP Mailer: Improper Neutralization of Special Elements used in an SQL Command
The POST SMTP Mailer WordPress plugin before 2.8.7 does not properly sanitise and escape several parameters before using them in SQL statements, leading to a SQL injection exploitable by high privilege users such as admin.
- 9.8 Critical severity
Post SMTP – Complete Email Deliverability and…: Missing Authorization
The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a type juggling issue on the connect-app REST endpoint in all ve
- 8.8 High severity
POST SMTP Mailer: Cross-Site Request Forgery
The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could allow attackers to make logged in users with the manage_postman_smtp capability resend an email to an arbitrary address (for example a passwor
- 7.2 High severity
Post SMTP Mailer/Email Log: Server-Side Request Forgery
The Post SMTP Mailer/Email Log WordPress plugin before 2.1.7 does not have proper authorisation in some AJAX actions, which could allow high privilege users such as admin to perform blind SSRF on multisite installations for example.