WordPress plugin
SMTP by BestWebSoft security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium1
- Low0
All SMTP by BestWebSoft vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Authenticated (Administrator+) Arbitrary File Upload ≤1.1.9Update to 1.2.0 | CVE-2024-13908 |
- High7.2Authenticated (Administrator+) Arbitrary File Upload
≤1.1.9Update to 1.2.0
SMTP by BestWebSoft: common questions
Does SMTP by BestWebSoft have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in SMTP by BestWebSoft: 1 high, 1 medium. None are known to affect version null.
How do I check which version of SMTP by BestWebSoft I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent SMTP by BestWebSoft vulnerability?
CVE-2024-13908, published Mar 7, 2025: SMTP by BestWebSoft <= 1.1.9 - Authenticated (Administrator+) Arbitrary File Upload. Severity: High (CVSS 7.2).
Is any SMTP by BestWebSoft vulnerability listed in CISA KEV?
No. None of the known SMTP by BestWebSoft vulnerabilities is currently listed in the CISA KEV catalog.