Plugin icon

SMTP Mail

smtp-mail
Plugin closed

Vulnerabilities:

5

Last Updated:

December 30, 2025

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2025-12-04
Title
SMTP Mail <= 1.3.49 - Cross-Site Request Forgery
Fixed in
No known fix
CVSS
4.3 (medium)
Published
2024-02-12
Title
SMTP Mail Plugin < 1.3.21 - Cross Site Request Forgery
Fixed in
Fixed in 1.3.21
CVSS
5.3 (medium)
Published
2023-07-05
Title
SMTP Mail < 1.3.43 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.3.43
CVSS
8.8 (high)
Published
2021-08-24
Title
SMTP Mail < 1.2 - Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.2
CVSS
7.1 (high)
Published
2021-08-24
Title
SMTP Mail < 1.2.2 - Authenticated SQL Injections
Fixed in
Fixed in 1.2.2
CVSS
6.8 (medium)