mail250

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

mail250 records in CISA KEV

No mail250 vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-20917 CVE-2025-28974 · GHSA-2j57-j25h-3fwc

WordPress Free WP Mail SMTP plugin <= 1.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in mail250 Free WP Mail SMTP free-wp-mail-smtp allows Stored XSS.This issue affects Free WP Mail SMTP: from n/a through <= 1.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00159 Published 2025-06-06 No fix listed CWE-352

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0