Skip to content
Sign in
5.4 Medium

CVE-2026-81278 Missing Authorization vulnerability in WPExperts Post SMTP allows Exploiting Incorrectly Configured Access Control…

Description

Missing Authorization vulnerability in WPExperts Post SMTP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Post SMTP: from 4.0.0 through beta.1.

Affected products and versions

Product Affected versions Fixed in
Post SMTP 4.0 4.0.0 → latest No fix stated

Other CVEs of Post SMTP

The 3 CVEs of Post SMTP →
CVE-2026-48838 Unauthenticated Cross Site Scripting (XSS) in Post SMTP <= 3.6.2 versions 7.1 High CVE-2025-24000 Authentication Bypass Using an Alternate Path or Channel vulnerability in Saad Iqbal Post SMTP post-smtp allows… 8.8 High
Track this CVE