[loverrocks]

Perfect thanks a lot my boy friend

[mrx0]

Thanks for sharing

[wantek]

This vulnerability makes it possible for unauthenticated threat actors to reset the API key used to authenticate to the mailer and view logs, including password reset emails on WordPress sites that use this plugin. We also received another submission shortly after for an Unauthenticated Stored Cross-Site Scripting vulnerability in POST SMTP Mailer plugin from another researcher. This vulnerability enables threat actors to inject malicious web scripts into pages.

Blog:
https://www.wordfence.com/blog/2024/01/t...ss-plugin/

PoC:

thank you my broo

[Angst]

Thanks for sharing

[0asdasdasd]

I am very curious on what exactly this would be.