Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

SMTP2GO vulnerabilities

3 published CVEs name SMTP2GO among the affected products.

All 3 in the listAtom feed of new CVEs
Published CVEs
3
Last 12 months
1
Critical
0
Known exploited
0

Critical 0High 0Medium 3Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20231
  2. 20251
  3. 20261

Newest CVEs

  • CVE-2026-7621

    SMTP2GO for WordPress <= 1.16.0 - Missing Authorization to Authenticated (Subscriber+) Log Read/Truncate

    smtp2go · SMTP2GO for WordPress – Email Made Easy

    Medium4.3
  • CVE-2025-54011

    WordPress SMTP2GO plugin <= 1.12.1 - Broken Access Control Vulnerability

    SMTP2GO · SMTP2GO

    Medium4.3
  • CVE-2023-28496

    WordPress SMTP2GO Plugin <= 1.4.2 is vulnerable to Cross Site Scripting (XSS)

    SMTP2GO · SMTP2GO – Email Made Easy

    Medium5.9

Products with the most CVEs

  1. SMTP2GO1
  2. SMTP2GO for WordPress – Email Made Easy1
  3. SMTP2GO – Email Made Easy1

Most common weaknesses

  1. CWE-862 Missing authorization2
  2. CWE-79 Cross-site scripting (XSS)1