Skip to content
OpenAdvisories
High · 7.1 CVE-2025-23453 EUVD-2025-3189GHSA-525m-g8gv-6hhc

WordPress Stars SMTP Mailer plugin <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerability

Published Jan 16, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Myriad Solutionz Product: Stars SMTP Mailer

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Myriad Solutionz Stars SMTP Mailer stars-smtp-mailer allows Reflected XSS.This issue affects Stars SMTP Mailer: from n/a through <= 1.7.

Affected products

VendorProductAffectedFixed
Myriad Solutionz Stars SMTP Mailer ≤ 1.7 —

References