saadiqbal Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App

• CVE-2026-3090 High 7.2 Post SMTP <= 3.8.0 - Unauthenticated Stored Cross-Site Scripting via 'event_type' 0.2%
• CVE-2026-2559 Medium 5.3 Post SMTP <= 3.8.0 - Missing Authorization to Authenticated (Subscriber+) Office 365 OAuth Configuration Overwrite 0.2%
• CVE-2025-12887 Medium 5.4 Post SMTP – Complete SMTP Solution with Logs, Alerts, Backup SMTP & Mobile App <= 3.6.1 - Missing Authorization to Authenticated (Subscriber+) OAuth Token Update 0.3%
• CVE-2025-11833 Critical 9.8 Post SMTP – Complete SMTP Solution with Logs, Alerts, Backup SMTP & Mobile App <= 3.6.0 - Missing Authorization to Account Takeover via Unauthenticated Email Log Disclosure 61.5%
• CVE-2025-9219 Medium 4.3 Post SMTP <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Option Update 0.3%
• CVE-2024-13844 Medium 4.9 Post SMTP <= 3.1.2 - Authenticated (Administrator+) SQL Injection via columns Parameter 0.4%
• CVE-2025-0521 High 7.2 Post SMTP <= 3.0.2 - Unauthenticated Stored Cross-Site Scripting 0.3%
• CVE-2024-5207 High 7.2 POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.9.3 - Authenticated (Administrator+) SQL Injection 0.5%
• CVE-2023-6875 Critical 9.8 POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Authorization Bypass via type connect-app API 90.3%
• CVE-2023-7027 High 7.2 POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Unauthenticated Stored Cross-Site Scripting via device 0.9%
• CVE-2023-6629 Medium 6.1 POST SMTP Mailer <= 2.8.6 - Reflected Cross-Site Scripting via msg 0.4%
• CVE-2021-4422 Medium 4.3 POST SMTP Mailer <= 2.0.20 - Cross-Site Request Forgery Bypass 0.5%
• CVE-2023-3082 High 7.2 Post SMTP <= 2.5.7 - Unauthenticated Stored Cross-Site Scripting via Email 0.5%