CVE-2023-7027

🗓️ 03 Jan 2024 04:29:34Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 125 Views

The POST SMTP Mailer - Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin is vulnerable to Stored Cross-Site Scriptin

Reporter	Title	Published	Views	Family All 18
ATTACKERKB	CVE-2023-7027	3 Jan 202405:15	–	attackerkb
BDU FSTEC	The vulnerability of the POST SMTP Mailer plugin in the WordPress content management system arises from the lack of security measures taken to protect the website’s structure. This vulnerability allows attackers to execute XSS attacks.	12 Feb 202400:00	–	bdu_fstec
Circl	CVE-2023-7027	3 Jan 202406:26	–	circl
CNNVD	WordPress Plugin POST SMTP Mailer Cross-Site Scripting Vulnerability	3 Jan 202400:00	–	cnnvd
Cvelist	CVE-2023-7027 POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Unauthenticated Stored Cross-Site Scripting via device	3 Jan 202404:29	–	cvelist
EUVD	EUVD-2023-59218	3 Oct 202520:07	–	euvd
NVD	CVE-2023-7027	3 Jan 202405:15	–	nvd
OpenVAS	WordPress Post SMTP Mailer/Email Log Plugin < 2.8.8 XSS Vulnerability	14 Aug 202400:00	–	openvas
Packet Storm	WordPress POST SMTP Mailer 2.8.7 Authorization Bypass / Cross Site Scripting	11 Jan 202400:00	–	packetstorm
Patchstack	WordPress Post SMTP Plugin <= 2.8.7 is vulnerable to Cross Site Scripting (XSS)	3 Jan 202400:00	–	patchstack

NVD

Vulners

Node

wpexperts post_smtpRange<2.8.8wordpress

[
  {
    "vendor": "saadiqbal",
    "product": "Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "2.8.7",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/7e8911a3-ce0f-420c-bf2a-1c2929d01cef
plugins	www.plugins.trac.wordpress.org/browser/post-smtp/trunk/Postman/Mobile/includes/rest-api/v1/rest-api.php
plugins	www.plugins.trac.wordpress.org/changeset
plugins	www.plugins.trac.wordpress.org/browser/post-smtp/trunk/Postman/Mobile/mobile.php
packetstormsecurity	www.packetstormsecurity.com/files/176525/WordPress-POST-SMTP-Mailer-2.8.7-Authorization-Bypass-Cross-Site-Scripting.html

17 Jun 2026 06:51Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.15.4 - 7.2

EPSS0.00941

SSVC

CWE-79