Unauthorized Access in WP Mail Gateway Plugin for WordPress

CVE-2026-6963

What is CVE-2026-6963?

The WP Mail Gateway plugin for WordPress has a vulnerability that allows unauthorized users to access and modify SMTP settings. This occurs due to a missing capability check in the AJAX action 'wmg_save_provider_config.' Attackers with Subscriber-level access or higher can exploit this flaw to update mail configurations. This could lead to potential privilege escalation, where the attacker can trigger password reset emails, thus gaining access to administrator accounts. It is crucial for users to patch their WordPress installations and ensure that only trusted users have appropriate access levels to mitigate such risks.

References