Post SMTP

Missing Authorization to Account Takeover via Unauthenticated Email Log Disclosure vulnerability <= 3.6.0

Missing Authorization to Authenticated (Subscriber+) Limited Plugin Option Update vulnerability <= 3.4.1

Account Takeover Vulnerability <= 3.2.0

Authenticated (Administrator+) SQL Injection via columns Parameter vulnerability <= 3.1.2

Unauthenticated Stored CrossSite Scripting vulnerability <= 3.0.2