CVE-2026-7621

Name of the Vulnerable Software and Affected Versions SMTP2GO for WordPress – Email Made Easy versions prior to 1.17.0

Description An unauthorized access issue exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Authenticated attackers with subscriber-level access or higher can truncate all SMTP2GO log records from the database or download a CSV export containing sensitive SMTP log data, such as recipient addresses, sender addresses, message subjects, and API response data.

Recommendations Update to a version later than 1.16.0.