WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
post-smtp
Published
2023-12-21
Title
Post SMTP < 2.8.7 - Admin+ SQL Injection
Slug
post-smtp
Published
2024-01-02
Title
POST SMTP Mailer < 2.8.8 - Unauthenticated Stored Cross-Site Scripting via device
Slug
post-smtp
Published
2024-01-10
Title
POST SMTP Mailer < 2.8.8 - Authorization Bypass via type connect-app API
Slug
post-smtp
Published
2024-05-22
Title
POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress < 2.9.4 - Administrator+ SQL Injection
Slug
post-smtp
Published
2024-11-15
Title
Post SMTP < 2.9.10 - Admin+ SQLi
Slug
post-smtp
Published
2025-01-07
Title
Post SMTP < 2.9.12 - Missing Authorization via regenerate_qrcode()
Slug
post-smtp
Published
2025-02-17
Title
Post SMTP < 3.1.0 - Unauthenticated Stored XSS
Slug
post-smtp
Published
2025-03-07
Title
Post SMTP < 3.1.3 - Authenticated (Administrator+) SQL Injection via columns Parameter
Slug
post-smtp
Published
2025-07-21
Title
Post SMTP < 3.3.0 - Subscriber+ Account Takeover via Email Log Exposure
Slug
post-smtp
Published
2025-09-02
Title
Post SMTP < 3.4.2 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Option Update
Slug
post-smtp
Published
2025-10-31
Title
Post SMTP < 3.6.1 - Account Takeover via Unauthenticated Email Log Disclosure
Slug
post-smtp
Published
2025-12-03
Title
Post SMTP – Complete SMTP Solution with Logs, Alerts, Backup SMTP & Mobile App < 3.6.2 - Missing Authorization to Authenticated (Subscriber+) OAuth Token Update
Slug
post-smtp
Published
2026-03-17
Title
Post SMTP < 3.9.0 - Unauthenticated Stored Cross-Site Scripting via 'event_type'
Slug
post-smtp
Published
2026-03-17
Title
Post SMTP < 3.9.0 - Missing Authorization to Authenticated (Subscriber+) Office 365 OAuth Configuration Overwrite
Slug
post-snippets
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
post-snippets
Published
2022-01-31
Title
Post Snippets < 3.1.4 - CSRF to Stored Cross-Site Scripting
Slug
post-snippets
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
post-snippets
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
post-snippets
Published
2023-05-09
Title
Post Snippets < 4.0.3 - Admin+ Stored XSS
Slug
post-snippets
Published
2025-12-31
Title
Post Snippets < 4.0.12 - Cross-Site Request Forgery
Slug
post-snippets
Published
2026-03-16
Title
Post Snippets – Custom WordPress Code Snippets Customizer < 4.0.13 - Authenticated (Contributor+) Remote Code Execution
Slug
post-snippits
Published
2026-03-20
Title
Post Snippits <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via Settings Update
Slug
post-status-notifier
Published
2024-10-28
Title
Post Status Notifier Lite and Premium <= 1.11.6 - Reflected Cross-Site Scripting via page
Slug
post-status-notifier-lite
Published
2022-12-15
Title
Post Status Notifier Lite < 1.10.1 - Reflected XSS
Slug
post-status-notifier-lite
Published
2023-11-14
Title
Post Status Notifier Lite < 1.11.1 - Reflected Cross-Site Scripting