photoboxone

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

photoboxone records in CISA KEV

No photoboxone vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Smtp Mail 2 records LOW

Records

3 records

TI-2023-02898 CVE-2023-3092 · GHSA-jv4w-wq8p-q68c

SMTP Mail <= 1.3.46 - Unauthenticated Stored Cross-Site Scripting via Email Subject

LOW 38

The SMTP Mail plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 1.3.46 due to insufficient input sanitization and output escaping when the 'Save Data…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00492 Published 2023-07-12 No fix listed CWE-79

TI-2024-17014 CVE-2024-25914 · GHSA-j52r-4px4-rww5

WordPress SMTP Mail Plugin <= 1.3.20 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in Photoboxone SMTP Mail.This issue affects SMTP Mail: from n/a through 1.3.20.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00214 Published 2024-02-13 No fix listed CWE-352

TI-2025-38951 CVE-2025-62762 · GHSA-jg5x-cqqv-xpg8

WordPress SMTP Mail plugin <= 1.3.51 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in photoboxone SMTP Mail smtp-mail allows Cross Site Request Forgery.This issue affects SMTP Mail: from n/a through <= 1.3.51.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00131 Published 2025-12-09 No fix listed CWE-352

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0