Vulnerabilities

TI-2025-38951 CVE-2025-62762 · GHSA-jg5x-cqqv-xpg8

WordPress SMTP Mail plugin <= 1.3.51 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in photoboxone SMTP Mail smtp-mail allows Cross Site Request Forgery.This issue affects SMTP Mail: from n/a through <= 1.3.51.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00131 Published 2025-12-09 No fix listed CWE-352

TI-2024-17014 CVE-2024-25914 · GHSA-j52r-4px4-rww5

WordPress SMTP Mail Plugin <= 1.3.20 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in Photoboxone SMTP Mail.This issue affects SMTP Mail: from n/a through 1.3.20.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00214 Published 2024-02-13 No fix listed CWE-352

TI-2023-02898 CVE-2023-3092 · GHSA-jv4w-wq8p-q68c

SMTP Mail <= 1.3.46 - Unauthenticated Stored Cross-Site Scripting via Email Subject

LOW 38

The SMTP Mail plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 1.3.46 due to insufficient input sanitization and output escaping when the 'Save Data…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00492 Published 2023-07-12 No fix listed CWE-79

Vulnerabilities

Filters

WordPress SMTP Mail plugin <= 1.3.51 - Cross Site Request Forgery (CSRF) vulnerability

WordPress SMTP Mail Plugin <= 1.3.20 is vulnerable to Cross Site Request Forgery (CSRF)

SMTP Mail <= 1.3.46 - Unauthenticated Stored Cross-Site Scripting via Email Subject