PLUGIN SECURITY
Make email delivery easy for WordPress. Connect with SMTP, Gmail, Outlook, SendGrid, Mailgun, SES, Zoho, + more. Rated #1 WordPress SMTP Email plugin.
wp-mail-smtp-proemailemail logsgmailoutlooksmtp
1 known CVE on file for WP Mail SMTP Pro. Reported between 2023 and 2023.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2023-3213 | WP Mail SMTP Pro [wp-mail-smtp-pro] < 3.8.1 | Missing Authorization | Medium 5.3 | < 3.8.1 | 3.8.1 | 2023-10-03 | — |
Update the WordPress WP Mail SMTP Pro plugin to the latest available version (at least 3.8.1). Alex Thomas discovered and reported this Broken Access Control vulnerability in WordPress WP Mail SMTP Pro Plugin. A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action. This vulnerability has been fixed in version 3.8.1.
Source: Patchstack
Update this plugin to the latest release from wordpress.org — each CVE above lists the exact release that fixed it ("Fixed in") when one is on file.
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.