Post SMTP < 3.3.0 - Subscriber+ Account Takeover via Email Log Exposure

Description

The plugin is vulnerable privilege escalation via account takeover due to a missing capability check on the get_details() function. This makes it possible for authenticated attackers, with subscriber-level access and above, to access email logs which can contain password reset details and lead to an account takeover for any user, including administrators.