SMTP by BestWebSoft

SMTP by BestWebSoft has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2017 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 6.7, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type.

Every one of the 2 issues recorded for SMTP by BestWebSoft has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. SMTP by BestWebSoft is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium
6.7/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all SMTP by BestWebSoft vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2024-13908

SMTP by BestWebSoft <= 1.1.9 - Authenticated (Administrator+) Arbitrary File Upload

Read the full analysis

Vulnerability Records

2 records
SMTP by BestWebSoft banner
Latestv1.2.0

SMTP by BestWebSoft

bestweblayout

Author

bestweblayout

4.4(13)
88/100
Last Updated
2025-06-12 (1y ago)
Active Installs
1,000+
Downloads
56,385
Requires WP
5.6+
Requires PHP
0+
Tested up to
WP 6.8.8
Created
2015-02-16 (12y ago)

Simple plugin to configure SMTP server to receive email messages from your WordPress website to Gmail, Yahoo, Hotmail, and others. Install, configure, test, and save your time! View Demo Features Send test email Display test email sending log Customize “From” field: Name Email Send test message with attachment Set SMTP: Host Port Choose SMTP secure connection: None SSL TLS Enable authentication with: Username Password Compatible with latest WordPress version Incredibly simple settings for fast setup without modifying code Detailed step-by-step documentation and videos If you have a feature suggestion or idea you’d like to see in the plugin, we’d love to hear about it! Suggest a Feature Documentation & Videos [Doc] User Guide [Doc] Installation Help & Support Visit our Help Center if you have any questions, our friendly Support Team is happy to help – https://support.bestwebsoft.com/ Translation Russian (ru_RU) Ukrainian (uk) Japanese (ja) Portuguese (pt_PT) German (de_DE) French (fr_FR) Spanish (es_ES) Italian (it_IT) Some of these translations are not complete. We are constantly adding new features which should be translated. If you would like to create your own language pack or update the existing one, you can send the text of PO and MO files to BestWebSoft and we’ll add it to the plugin. You can download the latest version of the program for work with PO and MO files Poedit. Recommended Plugins Updater – Automatically check and update WordPress website core with all installed plugins and themes to the latest versions.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C