CVE-2023-3082

Summary

CVE-2023-3082: This vulnerability affects the Post SMTP plugin for WordPress versions up to 2.5.7. Hackers can exploit insufficient input sanitization and output escaping in the plugin, leading to Stored Cross-Site Scripting (XSS) via email contents. Unauthenticated attackers can inject arbitrary web scripts that will execute when a user accesses an injected page, posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.