Sensitive Data Exposure in WP Gmail SMTP Plugin by Inkthemes
CVE-2025-53232

5.8MEDIUM

Key Information:

Vendor

WordPress
Status
WP Gmail Smtp
Vendor
CVE Published:
22 October 2025

What is CVE-2025-53232?

The WP Gmail SMTP plugin by Inkthemes contains a vulnerability that allows for the retrieval of embedded sensitive data. This issue affects versions of the plugin from release up to and including 1.0.7, creating potential risks for users' sensitive information. Proper mitigation steps should be taken to secure installations of this plugin to prevent unauthorized access to sensitive data.

Affected Version(s)

WP Gmail SMTP <= n/a

References

https://vdp.patchstack.com/database/Wordpress/Plugin/wp-g...
vdb-entry

CVSS V3.1

Score:
5.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Legion Hunter (Patchstack Alliance)
JSON
.