WPExperts Post SMTP vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting WPExperts Post SMTP: 2 record(s), with affected versions and fixes.
CVE-2026-81278
Medium · 5.4
CWE-862 Aug 31, 2026
WordPress Post SMTP plugin 4.0.0-beta.1 - Settings Change vulnerability
Missing Authorization vulnerability in WPExperts Post SMTP allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects Post SMTP: from 4.0.0 through beta.1.
CVE-2026-48838
High · 7.1
CWE-79 Jun 15, 2026
WordPress Post SMTP plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Post SMTP <= 3.6.2 versions.