WordPress Alert: Patch That Gaping Email Security Hole in Post SMTP!
Attention WordPress users! If you rely on the Post SMTP plugin, update to version 3.3.0 pronto. A critical vulnerability in earlier versions allowed even Subscribers to access sensitive data and perform actions they shouldn’t. Don’t let your site be a playground for mischief!
Hot Take:
WordPress users, brace yourselves! Who knew that your charming little Subscriber could potentially transform into a diabolical hacker, armed with nothing but a poorly checked permission? Time to update your Post SMTP plugin and put an end to this doomsday scenario!
Key Points:
- A critical vulnerability in WordPress’s Post SMTP plugin affected versions 3.2.0 and earlier.
- Subscribers could access sensitive data and perform unauthorized actions due to flawed permission checks.
- By exploiting this loophole, malicious users could reset Admin passwords, risking full site control.
- The flaw is tracked as CVE-2025-24000 and was patched in version 3.3.0.
- Immediate updates are crucial for all users, especially those with open registration sites.
Already a member? Log in here