Vulnerabilities > Wpexperts > Post Smtp > High

DATE CVE VULNERABILITY TITLE RISK
2022-09-26 CVE-2022-2352 Server-Side Request Forgery (SSRF) vulnerability in Wpexperts Post Smtp
The Post SMTP Mailer/Email Log WordPress plugin before 2.1.7 does not have proper authorisation in some AJAX actions, which could allow high privilege users such as admin to perform blind SSRF on multisite installations for example.
network
low complexity
wpexperts CWE-918
7.2