CVE-2025-24000

NVD	https://nvd.nist.gov/vuln/detail/CVE-2025-24000
CWE	https://cwe.mitre.org/data/definitions/288.html

NVD

https://nvd.nist.gov/vuln/detail/CVE-2025-24000

CWE

https://cwe.mitre.org/data/definitions/288.html

Authentication Bypass Using an Alternate Path or Channel vulnerability in WPExperts Post SMTP allows Authentication Bypass.This issue affects Post SMTP: from n/a through 3.2.0.

Weakness

A product requires authentication, but the product has an alternate path or channel that does not require authentication.

Potential Mitigations

https://cwe.mitre.org/data/definitions/127.html
https://cwe.mitre.org/data/definitions/665.html

References

https://patchstack.com/database/wordpress/plugin/post-smtp/vulnerability/wordpress-post-smtp-3-2-0-privilege-escalation-vulnerability?_s_id=cve

Authentication Bypass Using an Alternate Path or Channel

Weakness

Potential Mitigations

Related Attack Patterns

References