Post Smtp Mailer (Unknown) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2024-01-16. Vendor: Unknown.

CVEs of Post Smtp Mailer

• CVE-2023-3178 - CVSS 4.3 (medium), 2024-01-16: The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could allow attackers to make logged in users…
• CVE-2023-6620 - CVSS 7.2 (high), 2024-01-15: The POST SMTP Mailer WordPress plugin before 2.8.7 does not properly sanitise and escape several parameters before using them in SQL statements, leading to a…
• CVE-2023-5958 - CVSS 6.1 (medium), 2023-11-27: The POST SMTP Mailer WordPress plugin before 2.7.1 does not escape email message content before displaying it in the backend, allowing an unauthenticated…
• CVE-2023-3179 - CVSS 8.8 (high), 2023-07-17: The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could allow attackers to make logged in users…