The POST SMTP Mailer WordPress plugin before 2.7.1 does not escape email message content before displaying it in the backend, allowing an unauthenticated attacker to perform XSS attacks against highly privileged users.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Post Smtp Plugin | — | Update post-smtp plugin to version 2.7.1, or a newer patched version | May 15, 2025 | Nov 6, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub