Critical · published November 1, 2025
CVSS calls it critical at 9.8. It sits in the 99.2th percentile for exploit probability.
🚨 A simple missing capability check is leaving WordPress sites wide open! Unauthenticated attackers can easily access sensitive logged emails, including password reset links. 🔥 Think of this vulnerability like a hotel that forgot to check room keys at the entrance. Anyone can just stroll in and read the guests' mail, including those crucial 'reset your password' notes—yikes! This oversight could lead to a devastating account takeover, allowing attackers to hijack user accounts simply by retrieving sensitive emails. If your site relies on the Post SMTP plugin, you could be handing over the keys to your digital kingdom!
Think of this vulnerability like a hotel that forgot to check room keys at the entrance. Anyone can just stroll in and read the guests' mail, including those crucial 'reset your password' notes—yikes! The Post SMTP plugin for WordPress lacks a proper capability check in its __construct function, allowing unauthorized users to read any logged email sent through the plugin. This includes sensitive information like password reset emails, which can lead to account compromises.
This oversight could lead to a devastating account takeover, allowing attackers to hijack user accounts simply by retrieving sensitive emails. If your site relies on the Post SMTP plugin, you could be handing over the keys to your digital kingdom! Immediately update the Post SMTP plugin to version 3.6.1 or later to patch this vulnerability. Additionally, review your site’s user roles and permissions to ensure only authenticated users can access sensitive features. ✨ You've got this! Take these steps to secure your site and bolster your defenses! 🛡️