Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2025-06-02
CVE-2023-3178 - Post Smtp Mailer Plugin
The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could allow attackers to make logged in users with the manage_postman_smtp capability delete arbitrary logs via a CSRF attack.
PLUGIN
Post Smtp Mailer
CVE-2023-3178
Risk Score
Threat Entry
Updated 2025-06-20
CVE-2023-6620 - Post Smtp Mailer Plugin
The POST SMTP Mailer WordPress plugin before 2.8.7 does not properly sanitise and escape several parameters before using them in SQL statements, leading to a SQL injection exploitable by high privilege users such as admin.
PLUGIN
Post Smtp Mailer
CVE-2023-6620
Risk Score
Threat Entry
Updated 2025-06-04
CVE-2023-5958 - Post Smtp Mailer Plugin
The POST SMTP Mailer WordPress plugin before 2.7.1 does not escape email message content before displaying it in the backend, allowing an unauthenticated attacker to perform XSS attacks against highly privileged users.
PLUGIN
Post Smtp Mailer
CVE-2023-5958
Risk Score
Threat Entry
Updated 2025-06-04
CVE-2023-3179 - Post Smtp Mailer Plugin
The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could allow attackers to make logged in users with the manage_postman_smtp capability resend an email to an arbitrary address (for example a password reset email could be resent to an attacker controlled email, and allow them to take over an account).
PLUGIN
Post Smtp Mailer
CVE-2023-3179
Risk Score
Threat Entry
Updated 2026-04-08
CVE-2021-4422 - Post Smtp Mailer Plugin
The POST SMTP Mailer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.20. This is due to missing or incorrect nonce validation on the handleCsvExport() function. This makes it possible for unauthenticated attackers to trigger a CSV export via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
PLUGIN
Post Smtp Mailer
CVE-2021-4422
Risk Score