CVE-2023-3178 (published 2024-01-16T15:55:29.719Z)
The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could allow attackers to make logged in users with the manage_postman_smtp capability delete arbitrary logs via a CSRF attack.
Affected products: Vendor: Unknown
Product: POST SMTP Mailer
Versions: 2.5.0