CVE · High

CVE-2026-124267 — Missing Authorization

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-124267 Missing Authorization Missing Authorization High 7.5 < 1.2.3.24 1.2.3.24 2026-11-13 —

CVE-2026-124267 is a Missing Authorization vulnerability in the WordPress plugin gmail-smtp (gmail-smtp). Versions before 1.2.3.24 are affected. Fixed in 1.2.3.24. CVSS score: 7.5 (High). Published 2026-11-13.

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.