WordPress security by component
WP SMTP
Plugin description
WP SMTP is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Apr 26, 2024; the highest CVE/CNA score is 7.2.
Plugin slug:
wp-smtpLatest vulnerability
CVE-2024-1789: WP SMTP: SQL injection
WP SMTP is affected by SQL injection. Exploitation requires at least administrator-level access. A successful request can alter database queries and expose or modify WordPress data.
| Safe version |
|
||
|---|---|---|---|
| Apr 26, 2024 |
CVE-2024-1789
WP SMTP: SQL injection
WP SMTP is affected by SQL injection. Exploitation requires at least administrator-level access. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE7.2
NVDPending
|