Vulnerability CVE-2023-3178


Published: 2024-01-16

Description:
The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could allow attackers to make logged in users with the manage_postman_smtp capability delete arbitrary logs via a CSRF attack.

 References:
https://wpscan.com/vulnerability/5341cb5d-d204-49e1-b013-f8959461995f/

Copyright 2026, cxsecurity.com

 

Back to Top