PatchTheCVEwpexperts vulnerabilities
Recent CVEs affecting wpexperts products. 11 tracked.
wpexperts has 11 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 11. Most recent: 2025-03-08. Highest priority: CVE-2023-52233 (score 43/100).
- CVE-2025-24680 HIGH 7.1 UPGRADE Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in WPExperts.io WP
- CVE-2025-22800 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in Saad Iqbal Post SMTP post-smtp allows Exploiting Incorrectly Configured
- CVE-2025-0521 HIGH 7.2 UPGRADE The Post SMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the from and subject param
- CVE-2024-52436 HIGH 7.6 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqb
- CVE-2024-4753 MEDIUM 4.8 UPGRADE The WP Secure Maintenance WordPress plugin before 1.7 does not sanitise and escape some of its settings, which
- CVE-2024-43214 MEDIUM 5.3 UPGRADE Missing Authorization vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through <=
- CVE-2024-1639 MEDIUM 6.5 UPGRADE The License Manager for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a
- CVE-2024-13844 MEDIUM 4.9 UPGRADE The Post SMTP plugin for WordPress is vulnerable to generic SQL Injection via the ‘columns’ parameter in all v
- CVE-2024-13713 MEDIUM 6.5 UPGRADE The WPExperts Square For GiveWP plugin for WordPress is vulnerable to SQL Injection via the 'post' parameter i
- CVE-2024-12475 MEDIUM 6.4 UPGRADE The WP Multi Store Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions u
- CVE-2023-52233 HIGH 8.6 UPGRADE Missing Authorization vulnerability in Post SMTP Post SMTP Mailer/Email Log.This issue affects Post SMTP Maile
FAQ
How do I fix wpexperts vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wpexperts being exploited right now?
None of the tracked wpexperts CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wpexperts CVE should I patch first?
CVE-2023-52233 currently ranks highest (43/100): Missing Authorization vulnerability in Post SMTP Post SMTP Mailer/Email Log.This issue affects Post SMTP Maile.