Medium · 4.3 CVE-2025-31576 EUVD-2025-8815GHSA-cgm2-63mv-58w4

WordPress PostmarkApp Email Integrator plugin <= 2.4 - Broken Access Control vulnerability

Published Mar 31, 2025 · Updated May 11, 2026 · Assigned by Patchstack

Vendor: Gagan Deep Singh Product: PostmarkApp Email Integrator

Description

Missing Authorization vulnerability in Gagan Deep Singh PostmarkApp Email Integrator postmarkapp-email-integrator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PostmarkApp Email Integrator: from n/a through <= 2.4.

Affected products

Vendor	Product	Affected	Fixed
Gagan Deep Singh	PostmarkApp Email Integrator	≤ 2.4	—

References

https://patchstack.com/database/Wordpress/Plugin/postmarkapp-email-integrator/vulnerability/wordpress-postmarkapp-email-integrator-plugin-2-4-broken-access-control-vulnerability?_s_id=cve vdb-entry