All packages
Post SMTP vulnerabilities
3 known CVE vulnerabilities in Post SMTP, translated and rated.
- CVE-2026-81278Medium
Missing Authorization vulnerability in Post SMTP from 4.0.0 through beta.1. Allows exploiting incorrectly configured access control security levels.
- CVE-2026-48838High
Versions of Post SMTP <= 3.6.2 are vulnerable to unauthenticated Cross Site Scripting (XSS). An attacker can exploit this vulnerability to inject malicious scripts.
- CVE-2025-67563Medium
The Post SMTP plugin by Saad Iqbal is vulnerable to Missing Authorization, allowing exploitation of incorrectly configured access control security levels. This issue affects Post SMTP from n/a through <= 3.6.1.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS