What’s Vulnerable › Products
techjewel FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider vulnerabilities
5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Latest techjewel FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider vulnerabilities
- CVE-2025-24739 — WordPress FluentSMTP plugin <= 2.2.80 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- CVE-2024-9511 — FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider <= 2.2.82 - Unauthenticated PHP Object Injection (CVSS 9.8)
- CVE-2023-3087 — FluentSMTP <= 2.2.4 - Unauthenticated Stored Cross-Site Scripting via Email Subject (CVSS 6.1)
- CVE-2023-0219 — FluentSMTP < 2.2.3 - Stored XSS via Email Logs (CVSS 5.4)
- CVE-2021-24528 — FluentSMTP < 2.0.1 - Authenticated Stored XSS (CVSS 5.4)