Skip to content
Sign in
7.2 High

CVE-2023-6620 The POST SMTP Mailer WordPress plugin before 2.8.7 does not properly sanitise and escape several parameters before using…

Description

The POST SMTP Mailer WordPress plugin before 2.8.7 does not properly sanitise and escape several parameters before using them in SQL statements, leading to a SQL injection exploitable by high privilege users such as admin.

Affected products and versions

Product Affected versions Fixed in
POST SMTP Mailer 2.8 earliest → < 2.8.7 2.8.7

Other CVEs of POST SMTP Mailer

The 4 CVEs of POST SMTP Mailer →
CVE-2023-3178 The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could… 4.3 Medium CVE-2023-5958 The POST SMTP Mailer WordPress plugin before 2.7.1 does not escape email message content before displaying it in the… Not rated CVE-2023-3179 The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could… Not rated
Track this CVE