Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: inkthemes Clear all filters
TI-2025-33199 CVE-2025-53232 · GHSA-hhcx-x49f-jr9v

WordPress WP Gmail SMTP plugin <= 1.0.7 - Sensitive Data Exposure vulnerability

Priority LOW 32

Insertion of Sensitive Information Into Sent Data vulnerability in inkthemes WP Gmail SMTP wp-gmail-smtp allows Retrieve Embedded Sensitive Data.This issue affects WP Gmail SMTP: from n/a through <= 1.0.7.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00297 Published 2025-10-22 No fix listed CWE-201
TI-2025-30653 CVE-2025-48327 · GHSA-4hf2-vc5g-v7qr

WordPress WP Mailgun SMTP plugin <= 1.0.7 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in inkthemes WP Mailgun SMTP wp-mailgun-smtp allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Mailgun SMTP: from n/a through <= 1.0.7.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0029 Published 2025-08-28 No fix listed CWE-862
TI-2022-03444 CVE-2022-3750 · GHSA-vw43-4r8p-cvx6

Ask Me < 6.8.7 - Post Deletion via CSRF

Priority MEDIUM 55

The has a CSRF vulnerability that allows the deletion of a post without using a nonce or prompting for confirmation.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00389 Published 2022-11-21 Fixed in 6.8.7 CWE-352
TI-2022-01137 CVE-2022-1251 · GHSA-c83j-mhmm-58g7

Ask Me < 6.8.4 - CSRF in Edit Profile

Priority LOW 20

The Ask me WordPress theme before 6.8.4 does not perform nonce checks when processing POST requests to the Edit Profile page, allowing an attacker to trick a user to change their profile information by sending a crafted…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00416 Published 2022-08-22 Fixed in 6.8.4 CWE-352