EUVD-2024-26166

Malicious code in bioql PyPI...

EUVD-2023-43773

Malicious code in bioql PyPI...

EUVD-2023-56906

Malicious code in bioql PyPI...

EUVD-2023-58229

Malicious code in bioql PyPI...

EUVD-2025-28826

Malicious code in bioql PyPI...

EUVD-2024-45919

Malicious code in bioql PyPI...

EUVD-2025-23940

Malicious code in bioql PyPI...

EUVD-2021-34249

Malicious code in bioql PyPI...

EUVD-2023-43860

Malicious code in bioql PyPI...

CVE-2025-9219

The Post SMTP – WP SMTP Plugin with Email Logs and Mobile App for Failure Notifications – Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES and more plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'updatepostsmtpprooptioncallback'...

CVE-2025-9219 Post SMTP <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Option Update

The Post SMTP – WP SMTP Plugin with Email Logs and Mobile App for Failure Notifications – Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES and more plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'updatepostsmtpprooptioncallback'...

CVE-2025-9219 Post SMTP <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Option Update

The Post SMTP – WP SMTP Plugin with Email Logs and Mobile App for Failure Notifications – Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES and more plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'updatepostsmtpprooptioncallback'...

WordPress plugin Post SMTP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-35705

Name of the Vulnerable Software and Affected Versions: Post SMTP – WP SMTP Plugin versions up to and including 3.4.1 Description: The Post SMTP – WP SMTP Plugin for WordPress is susceptible to unauthorized data modification due to a missing capability check within the update post smtp pro option...

WordPress Post SMTP plugin <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Option Update vulnerability

Missing Authorization to Authenticated Subscriber+ Limited Plugin Option Update vulnerability discovered by WordFence in WordPress Plugin Post SMTP versions = 3.4.1...

WordPress WPExperts Post SMTP plugin authentication bypass vulnerability

WordPress WPExperts Post SMTP plugin is a plugin for optimizing the WordPress email sending process. The main features include custom email services, email logging, DNS authentication and OAuth authorization. An authentication bypass vulnerability exists in the WordPress WPExperts Post SMTP plugi...

CVE-2025-24000

Authentication Bypass Using an Alternate Path or Channel vulnerability in Saad Iqbal Post SMTP post-smtp allows Authentication Bypass.This issue affects Post SMTP: from n/a through = 3.2.0...

CVE-2025-24000 WordPress Post SMTP plugin <= 3.2.0 - Account Takeover Vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in Saad Iqbal Post SMTP post-smtp allows Authentication Bypass.This issue affects Post SMTP: from n/a through = 3.2.0...

CVE-2025-24000 WordPress Post SMTP plugin <= 3.2.0 - Account Takeover Vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in Saad Iqbal Post SMTP post-smtp allows Authentication Bypass.This issue affects Post SMTP: from n/a through = 3.2.0...

CVE-2025-24000

CVE-2025-24000 is a vulnerability in the WordPress plugin Post SMTP (versions ≤ 3.2.0) causing broken access control in the REST API. The issue allows any logged-in, low-privilege user to access admin-only endpoints (for example, /wp-json/psd/v1/get-logs, get-details, and resending email), enabli...