← All advisories

Medium severity5.4NVD Advisory· Published Aug 31, 2026· Updated Sep 1, 2026

CVE-2026-81278

CVE-2026-81278

Description

Missing Authorization vulnerability in WPExperts Post SMTP allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Post SMTP: from 4.0.0 through beta.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

WordPress/Post SMTPllm-fuzzy
Range: 4.0.0 - beta.1
Package: https://wordpress.org/plugins/post-smtp

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/post-smtp/vulnerability/wordpress-post-smtp-plugin-4-0-0-beta-1-settings-change-vulnerabilitynvd

News mentions

1

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 24, 2026 to August 30, 2026)
Wordfence Blog · Sep 3, 2026