CVE-2025-24000

Authentication Bypass Using an Alternate Path or Channel vulnerability in Saad Iqbal Post SMTP post-smtp allows Authentication Bypass.This issue affects Post SMTP: from n/a through = 3.2.0...

CVE-2025-24000 WordPress Post SMTP plugin <= 3.2.0 - Account Takeover Vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in Saad Iqbal Post SMTP post-smtp allows Authentication Bypass.This issue affects Post SMTP: from n/a through = 3.2.0...

CVE-2025-24000

CVE-2025-24000 is a vulnerability in the WordPress plugin Post SMTP (versions ≤ 3.2.0) causing broken access control in the REST API. The issue allows any logged-in, low-privilege user to access admin-only endpoints (for example, /wp-json/psd/v1/get-logs, get-details, and resending email), enabli...

CVE-2025-24000

creationtimestamp| type| source ---|---|--- 2025-07-25 13:42:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lus6jessrl2w 2025-07-28 08:53:33+00:00| seen| https://threatintel.cc/2025/07/28/flaw-allowing-website-takeover-found.html 2025-07-28 13:14:11+00:00| seen|...

WordPress Post SMTP plugin <= 3.2.0 - Account Takeover Vulnerability

Account Takeover Vulnerability discovered by Denver Jackson Patchstack Alliance in WordPress Plugin Post SMTP versions = 3.2.0...