CVE-2026-81278 — WordPress Post SMTP plugin 4.0.0-beta.1 - Settings Change vulnerability

CVE-2026-81278

WordPress Post SMTP plugin 4.0.0-beta.1 - Settings Change vulnerability PUBLISHED

Description (CNA)

Missing Authorization vulnerability in WPExperts Post SMTP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Post SMTP: from 4.0.0 through beta.1.

Affected (CNA)

Vendor / product	Versions
WPExperts / Post SMTP	affected 4.0.0 through beta.1

CWE

CWE-862

References

https://patchstack.com/database/wordpress/plugin/post-smtp/vulnerability/wordpress-post-smtp-plugin-4-0-0-beta-1-settings-change-vulnerability?_s_id=cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.