WPExperts Post SMTP Authentication Bypass Vulnerability

A vulnerability allowing authentication bypass has been identified in the WPExperts Post SMTP plugin, affecting versions through 3.2.0. This issue allows attackers to bypass authentication mechanisms, potentially leading to unauthorized access or actions on behalf of higher-privileged users.

Impact

Exploitation of this vulnerability could allow attackers to gain unauthorized access and perform actions reserved for higher-privileged users, possibly leading to admin access on the website.

Remediation

Users of the WPExperts Post SMTP plugin should update to version 3.3.0 or later. Patchstack users can enable auto-updates for vulnerable plugins.