Blog

Alertes, guideset veille WordPress.

Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.

32 902

Vulnérabilités (CVE)

Guides publiés

156

Publiés ce mois-ci

Filtre par plugin

smtp mail

Effacer

Post SMTP – Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App

ÉlevéeCVSS 7.2

CVE-2026-75962

XSS DOM, non authentifié, dans Post SMTP – Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App (<= 4.0.1)

Plugin: Post SMTP – Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App
Versions: <= 4.0.1
CVSS: 7.2/10
Correctif: 4.0.2

XSS stocké, non authentifié, dans FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, Mailgun, Postmark, Cloudflare, toSend, Gmail and Any SMTP (<= 2.2.95)

Plugin: FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, Mailgun, Postmark, Cloudflare, toSend, Gmail and Any SMTP
Versions: <= 2.2.95
CVSS: 7.2/10
Correctif: 2.3.0

Injection SQL, authentifié (Administrateur+), dans Icegram Mailer – Reliable Email Deliverability, No-code SMTP Replacement & Email logs (<= 1.0.12)

Plugin: Icegram Mailer – Reliable Email Deliverability, No-code SMTP Replacement & Email logs
Versions: <= 1.0.12
CVSS: 4.9/10
Correctif: 1.0.13

CSRF (Cross-Site Request Forgery) dans Gmail SMTP (<= 1.2.3.19)

Plugin: Gmail SMTP
Versions: <= 1.2.3.19
CVSS: 4.3/10
Correctif: 1.2.3.20

XSS stocké, non authentifié, dans Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App (<= 3.6.2)

Plugin: Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App
Versions: <= 3.6.2
CVSS: 7.2/10
Correctif: 3.6.3

Défaut de contrôle d'accès, authentifié (Auteur+), dans SMTP2GO for WordPress – Email Made Easy (<= 1.16.0)

Plugin: SMTP2GO for WordPress – Email Made Easy
Versions: <= 1.16.0
CVSS: 4.3/10
Correctif: 1.17.0

Défaut de contrôle d'accès dans Bit SMTP – Easy SMTP Solution with Email Logs (<= 1.2.2)

Plugin: Bit SMTP – Easy SMTP Solution with Email Logs
Versions: <= 1.2.2
CVSS: 5.3/10
Correctif: 1.2.3

Faille de sécurité, non authentifié, dans SMTP Mailer (<= 1.1.24)

Plugin: SMTP Mailer
Versions: <= 1.1.24
CVSS: 7.5/10
Correctif: 1.1.25

XSS stocké, non authentifié, dans Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App (<= 3.8.0)

Plugin: Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App
Versions: <= 3.8.0
CVSS: 7.2/10
Correctif: 3.9.0

Défaut de contrôle d'accès, authentifié (Auteur+), dans Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App (<= 3.8.0)

Plugin: Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App
Versions: <= 3.8.0
CVSS: 5.3/10
Correctif: 3.9.0