Vulnerabilities > Wpexperts > Post Smtp Mailer > 2.5.9.3

DATE CVE VULNERABILITY TITLE RISK
2024-06-11 CVE-2023-52233 Unspecified vulnerability in Wpexperts Post Smtp Mailer
Missing Authorization vulnerability in Post SMTP Post SMTP Mailer/Email Log.This issue affects Post SMTP Mailer/Email Log: from n/a through 2.8.6.
network
low complexity
wpexperts
critical
9.8
2024-01-15 CVE-2023-6620 SQL Injection vulnerability in Wpexperts Post Smtp Mailer
The POST SMTP Mailer WordPress plugin before 2.8.7 does not properly sanitise and escape several parameters before using them in SQL statements, leading to a SQL injection exploitable by high privilege users such as admin.
network
low complexity
wpexperts CWE-89
7.2
2024-01-11 CVE-2023-6875 Missing Authorization vulnerability in Wpexperts Post Smtp Mailer
The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a type juggling issue on the connect-app REST endpoint in all versions up to, and including, 2.8.7.
network
low complexity
wpexperts CWE-862
critical
9.8
2023-11-27 CVE-2023-5958 Cross-site Scripting vulnerability in Wpexperts Post Smtp Mailer
The POST SMTP Mailer WordPress plugin before 2.7.1 does not escape email message content before displaying it in the backend, allowing an unauthenticated attacker to perform XSS attacks against highly privileged users.
network
low complexity
wpexperts CWE-79
6.1