CVE Catalog
CVE-2026-81278
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk0.17%
7th percentile - higher than 7% of all known CVEs
Summary
Missing Authorization vulnerability in Post SMTP from 4.0.0 through beta.1. Allows exploiting incorrectly configured access control security levels.
Risk Assessment
Attackers can exploit missing authorization to perform unauthorized actions, potentially leading to security compromise.
Recommendation
Update Post SMTP to a patched version.
Other vulnerabilities in Post SMTP
Original NVD description (English source)
Missing Authorization vulnerability in WPExperts Post SMTP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Post SMTP: from 4.0.0 through beta.1.