Heise.De

Vulnerability in Post SMTP Plugin Allows WordPress Account Takeover

First seen 2 Dec 2025, 18:33 UTC • Heise.De

•84% similarity •13.6

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A critical vulnerability in the Post SMTP plugin, used by over 400,000 WordPress sites, has been discovered, allowing unauthenticated attackers to hijack administrator accounts. The flaw enables attackers to access email logs and reset passwords, compromising entire WordPress instances. A patch for the vulnerability has been released following reports from security researchers.

ThreatCluster AI How this analysis works

Attack Flow

9 entities, 14 inferred relationships (STIX 2.1).

Technique (1)

Data Breach

Organization (1)

Wordfence

Vulnerability (2)

CVE-2025-11833
CVE-2025-24000

Indicator (1)

wordpress.org

Affected Platform (4)

PHP
Post SMTP
Post SMTP plug-in
WordPress

Relationships

CVE-2025-11833 targets PHP
CVE-2025-11833 targets Post SMTP
CVE-2025-11833 targets Post SMTP plug-in
CVE-2025-11833 targets WordPress
CVE-2025-24000 targets PHP
CVE-2025-24000 targets Post SMTP
CVE-2025-24000 targets Post SMTP plug-in
CVE-2025-24000 targets WordPress
Data Breach targets PHP
Data Breach targets Post SMTP
Data Breach targets Post SMTP plug-in
Data Breach targets WordPress
CVE-2025-11833 related to Wordfence
CVE-2025-11833 related to wordpress.org

Community

Browse all →

Tracked Entities in This Story

Wordfence PHP Post SMTP Post SMTP plug-in WordPress

Vulnerability in Post SMTP Plugin Allows WordPress Account Takeover

Ask AI about this cluster

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading

Tracked Entities in This Story