CVE Daily

CVE-2025-24000

Authentication Bypass Using an Alternate Path or Channel vulnerability in WPExpe...

High CVSS 8.8

Overview

Authentication Bypass Using an Alternate Path or Channel vulnerability in WPExperts Post SMTP allows Authentication Bypass.This issue affects Post SMTP: from n/a through 3.2.0.

CWE: CWE-288 Published: 2025-08-07T17:15:28.060
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 8.8 (HIGH)
  • Detected tags: unauth_access (tag impact: HIGH)

Recommended actions:

  • Enforce authentication/authorization; reduce default endpoint exposure.

Recommended tools

Tags