Topic: email log exposure

Critical SMTP Plugin Flaw Puts 200K WordPress Sites at Risk

A critical vulnerability (CVE-2025-24000) in Post SMTP plugin exposed over 200,000 WordPress sites, allowing attackers to hijack administrator accounts via email logs. The flaw stemmed from inadequate access controls, letting low-privilege users view sensitive email logs, including password reset...