Skip to content
OpenAdvisories

Vendor

smtp2go

3 known vulnerabilities.

Products

SMTP2GO 1 SMTP2GO for WordPress – Email Made Easy 1 SMTP2GO – Email Made Easy 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-7621

    SMTP2GO for WordPress <= 1.16.0 - Missing Authorization to Authenticated (Subscriber+) Log Read/Truncate

    The SMTP2GO for WordPress – Email Made Easy plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.16.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it …

    smtp2go SMTP2GO for WordPress – Email Made Easy Web / CMS
  • Medium 4.3
    CVE-2025-54011

    WordPress SMTP2GO plugin <= 1.12.1 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in SMTP2GO SMTP2GO smtp2go allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SMTP2GO: from n/a through <= 1.12.1.

    smtp2go SMTP2GO
  • Medium 5.9
    CVE-2023-28496

    WordPress SMTP2GO Plugin <= 1.4.2 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SMTP2GO – Email Made Easy plugin <= 1.4.2 versions.

    smtp2go SMTP2GO – Email Made Easy