WordPress Post SMTP Mailer Plugin Security Update Advisory (CVE-2023-6875)

Overview

An update has been made available to fix vulnerabilities in WordPress Post SMTP Mailer (an email sending and management plugin). Users of affected versions are advised to update to the latest version.

 

Affected Products

All versions of Post SMTP Mailer up to 2.8.7

 

Resolved Vulnerabilities

Authorization bypass via the Connect-app API inPost SMTP Mailer (CVE-2023-6875)

 

Vulnerability Patches

Please visit the referenced site to update to the latest version.

 

Referenced Sites

[1] POST SMTP – The #1 WordPress SMTP Plugin with Advanced Email Logging and Delivery Failure Notifications

POST SMTP – The #1 WordPress SMTP Plugin with Advanced Email Logging and Delivery Failure Notifications – WordPress plugin | WordPress.org

[2] WordPress Patches Multiple Vulnerabilities in POST SMTP Mailer Plugin (CVE-2023-6875 & CVE-2023-7027)

WordPress Patches Multiple Vulnerabilities in POST SMTP Mailer Plugin (CVE-2023-6875 & CVE-2023-7027) – Qualys ThreatPROTECT