Access Control Flaw in Post SMTP Plugin by Post SMTP

CVE-2025-22800

What is CVE-2025-22800?

The Post SMTP plugin is affected by a missing authorization vulnerability that allows attackers to exploit improperly configured access control security levels. This flaw can potentially enable unauthorized users to gain access to sensitive functionality that should be restricted. It is crucial for users of the Post SMTP plugin, particularly those using versions up to 2.9.11, to take immediate action to safeguard their applications and ensure proper configuration of access controls.

References