CVE-2023-3213

WP Mail SMTP Pro versions prior to 3.8.1 contain a broken access control vulnerability that allows unauthorized users to perform actions restricted to higher privilege levels. The flaw stems from missing authorization checks, authentication validation, or nonce token verification in certain functions. This vulnerability was discovered by Alex Thomas and has been remedied in version 3.8.1 and later.

Based on public CVE data (MITRE/NVD).