EUVD-2026-53702

The FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Recipient Display Name to.name in Email Logs in all versions up to, and including, 2.2.95 due to insufficient input...

PT-2025-5551 · Unknown · Fluentsmtp

Name of the Vulnerable Software and Affected Versions: FluentSMTP versions 2.2.80 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For FluentSMTP versions 2.2.80 an...