CVE Database /
CVE-2022-2352
CVE · High
CVE-2022-2352 — Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App [post-smtp] < 2.1.7
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-2352
|
Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App [post-smtp] < 2.1.7 |
Server-Side Request Forgery (SSRF) |
High
7.2
|
< 2.1.7
|
2.1.7 |
2022-09-05 |
—
|
CVE-2022-2352
The Post SMTP plugin versions up to 2.1.6 contains an authenticated server-side request forgery vulnerability that could be exploited by logged-in users. This flaw allows attackers with authentication credentials to make arbitrary requests from the affected server without user awareness. The vulnerability was resolved in version 2.1.7 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings