Lucene search
+L

36 matches found

KittySploit
KittySploit
•added 2026/07/28 11:27 a.m.•5 views

SMTP2GO Detect

Detects SMTP2GO Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects SMTP2GO Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SMTP2GO Detect', 'description': 'Detects SMTP2GO Detect.', 'author':...

5.8AI score
SaveExploits0References1
NVD
NVD
•added 2026/05/28 8:16 a.m.•53 views

CVE-2026-7621

The SMTP2GO for WordPress – Email Made Easy plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.16.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers,...

4.3CVSS0.00434EPSS
SaveExploits0References11
CVE
CVE
•added 2026/05/28 6:45 a.m.•66 views

CVE-2026-7621

The SMTP2GO for WordPress – Email Made Easy plugin (WordPress) is vulnerable in all versions up to 1.16.0 due to improper authorization checks. Authenticated users with subscriber-level access or higher can truncate SMTP log records or export sensitive log data (recipient/sender addresses, subjec...

4.3CVSS5.8AI score0.00434EPSS
SaveExploits0References11
Cvelist
Cvelist
•added 2026/05/28 6:45 a.m.•54 views

CVE-2026-7621 SMTP2GO for WordPress <= 1.16.0 - Missing Authorization to Authenticated (Subscriber+) Log Read/Truncate

The SMTP2GO for WordPress – Email Made Easy plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.16.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers,...

4.3CVSS0.00434EPSS
SaveExploits0References11
attackerkb
attackerkb
•added 2026/05/28 6:45 a.m.•23 views

CVE-2026-7621

The SMTP2GO for WordPress – Email Made Easy plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.16.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers,...

4.3CVSS5.8AI score0.00434EPSS
SaveExploits0References12
Vulnrichment
Vulnrichment
•added 2026/05/28 6:45 a.m.•20 views

CVE-2026-7621 SMTP2GO for WordPress <= 1.16.0 - Missing Authorization to Authenticated (Subscriber+) Log Read/Truncate

The SMTP2GO for WordPress – Email Made Easy plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.16.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers,...

4.3CVSS5.8AI score0.00434EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/28 12:00 a.m.•11 views

CVE-2026-7621: Missing Authorization

The SMTP2GO for WordPress – Email Made Easy plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.16.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers,...

4.3CVSS5.7AI score0.00434EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/05/27 5:42 p.m.•25 views

WordPress SMTP2GO for WordPress – Email Made Easy plugin <= 1.16.0 - Missing Authorization to Authenticated (Subscriber+) Log Read/Truncate vulnerability

Missing Authorization to Authenticated Subscriber+ Log Read/Truncate vulnerability discovered by darkmode in WordPress Plugin SMTP2GO versions = 1.16.0...

4.3CVSS5.8AI score0.00434EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2023-32166

Malicious code in bioql PyPI...

5.9CVSS6.2AI score0.00369EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2025-21679

Malicious code in bioql PyPI...

4.3CVSS6.5AI score0.00232EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/07/18 10:59 a.m.•22 views

CVE-2025-54011

Missing Authorization vulnerability in SMTP2GO SMTP2GO smtp2go allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SMTP2GO: from n/a through = 1.12.1...

4.3CVSS5.9AI score0.00232EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/07/16 12:12 p.m.•18 views

WordPress SMTP2GO plugin <= 1.12.1 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin SMTP2GO versions = 1.12.1...

4.3CVSS6.7AI score0.00232EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/07/16 11:15 a.m.•18 views

CVE-2025-54011

Missing Authorization vulnerability in SMTP2GO SMTP2GO smtp2go allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SMTP2GO: from n/a through = 1.12.1...

4.3CVSS0.00232EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/07/16 10:36 a.m.•29 views

CVE-2025-54011 WordPress SMTP2GO plugin <= 1.12.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in SMTP2GO SMTP2GO smtp2go allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SMTP2GO: from n/a through = 1.12.1...

4.3CVSS0.00232EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/07/16 10:36 a.m.•10 views

CVE-2025-54011 WordPress SMTP2GO plugin <= 1.12.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in SMTP2GO SMTP2GO smtp2go allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SMTP2GO: from n/a through = 1.12.1...

4.3CVSS5.9AI score0.00232EPSS
SaveExploits0References1
CVE
CVE
•added 2025/07/16 10:36 a.m.•48 views

CVE-2025-54011

CVE-2025-54011 affects the WordPress SMTP2GO plugin up to and including 1.12.1. Root cause is missing authorization enabling broken access control. Reported risk score: CVSS 3.1 base 4.3 (Medium) with network access and low privileges required. Connected sources indicate a patched state; remediat...

4.3CVSS5.9AI score0.00232EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/07/16 12:00 a.m.•16 views

WordPress plugin SMTP2GO has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS6.5AI score0.00232EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/07/16 12:00 a.m.•19 views

PT-2025-29745 · Smtp2Go · Smtp2Go

Name of the Vulnerable Software and Affected Versions: SMTP2GO versions n/a through 1.12.1 Description: The SMTP2GO software contains a missing authorization flaw that allows exploiting incorrectly configured access control security levels. Recommendations: At the moment, there is no information...

4.3CVSS6.1AI score0.00232EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/16 12:00 a.m.•8 views

CVE-2025-54011: Missing Authorization

Missing Authorization vulnerability in SMTP2GO SMTP2GO smtp2go allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SMTP2GO: from n/a through = 1.12.1...

4.3CVSS5.9AI score0.00232EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:50 a.m.•17 views

CVE-2023-28496

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in SMTP2GO – Email Made Easy plugin = 1.4.2 versions...

5.9CVSS5.6AI score0.00369EPSS
SaveExploits0References1
Rows per page
Query Builder