CVE-2024-13844

< 3.1.3

The Post SMTP plugin for WordPress is vulnerable to generic SQL Injection via the ‘columns’ parameter in all versions up to, a

4.9MEDIUM

CVE-2025-0521

< 3.1.0

The Post SMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the from and subject parameter in all versions

7.2HIGH

CVE-2025-22800

< 2.9.12

Missing Authorization vulnerability in Saad Iqbal Post SMTP post-smtp allows Exploiting Incorrectly Configured Access Control Secu

4.3MEDIUM

CVE-2024-52436

<= 2.9.9

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal Post SMTP post-sm

7.6HIGH

CVE-2023-52233

< 2.8.7

Missing Authorization vulnerability in Post SMTP Post SMTP Mailer/Email Log.This issue affects Post SMTP Mailer/Email Log: from n/

8.6HIGH

CVE-2024-5207

< 2.9.4

The POST SMTP - The #1 WordPress SMTP Plugin with Advanced Email Logging and Delivery Failure Notifications plugin for WordPress i

7.2HIGH

CVE-2024-29128

< 2.8.7

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Post SMTP POST SMTP allows R

7.1HIGH

CVE-2023-3178

< 2.5.7

The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could allow attack

4.3MEDIUM

CVE-2023-6620

< 2.8.7

The POST SMTP Mailer WordPress plugin before 2.8.7 does not properly sanitise and escape several parameters before using them in S

7.2HIGH

CVE-2023-6875

<= 2.8.7

The POST SMTP Mailer - Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerab

9.8CRITICAL

CVE-2023-6621

< 2.8.7

The POST SMTP WordPress plugin before 2.8.7 does not sanitise and escape the msg parameter before outputting it back in the page,

6.1MEDIUM

CVE-2023-7027

< 2.8.8

The POST SMTP Mailer - Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerab

7.2HIGH

CVE-2023-6629

< 2.8.7

The POST SMTP Mailer - Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerab

6.1MEDIUM

CVE-2023-5958

< 2.7.1

The POST SMTP Mailer WordPress plugin before 2.7.1 does not escape email message content before displaying it in the backend, allo

6.1MEDIUM

CVE-2023-3179

< 2.5.7

The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could allow attack

8.8HIGH

CVE-2021-4422

<= 2.0.20

The POST SMTP Mailer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.20. Th

4.3MEDIUM

CVE-2023-3082

< 2.5.8

The Post SMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and includin

7.2HIGH

CVE-2022-2352

< 2.1.7

The Post SMTP Mailer/Email Log WordPress plugin before 2.1.7 does not have proper authorisation in some AJAX actions, which could

7.2HIGH

CVE-2022-2351

< 2.1.4

The Post SMTP Mailer/Email Log WordPress plugin before 2.1.4 does not escape some of its settings before outputting them in the ad

4.8MEDIUM