PatchTheCVEpost smtp vulnerabilities and fixes
Recent CVEs affecting post smtp, with upgrade or downgrade steps. 6 tracked.
Also searched as: postsmtp.
post smtp has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2025-03-08. Highest priority: CVE-2023-52233 (score 43/100).
- CVE-2025-22800 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in Saad Iqbal Post SMTP post-smtp allows Exploiting Incorrectly Configured
- CVE-2025-0521 HIGH 7.2 UPGRADE The Post SMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the from and subject param
- CVE-2024-5207 HIGH 7.2 UPGRADE The POST SMTP – The #1 WordPress SMTP Plugin with Advanced Email Logging and Delivery Failure Notifications pl
- CVE-2024-52436 HIGH 7.6 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqb
- CVE-2024-13844 MEDIUM 4.9 UPGRADE The Post SMTP plugin for WordPress is vulnerable to generic SQL Injection via the ‘columns’ parameter in all v
- CVE-2023-52233 HIGH 8.6 UPGRADE Missing Authorization vulnerability in Post SMTP Post SMTP Mailer/Email Log.This issue affects Post SMTP Maile
FAQ
How do I fix post smtp vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is post smtp being exploited right now?
None of the tracked post smtp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which post smtp CVE should I patch first?
CVE-2023-52233 currently ranks highest (43/100): Missing Authorization vulnerability in Post SMTP Post SMTP Mailer/Email Log.This issue affects Post SMTP Maile.