Swift SMTP (formerly Welcome Email Editor)
Swift SMTP (formerly Welcome Email Editor) has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; all 2 are fixed as of September 2026. Their average CVSS score is 4.8, and the most serious one scores 5.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Missing Authorization.
Every one of the 2 issues recorded for Swift SMTP (formerly Welcome Email Editor) has a vendor fix available, so running the current release closes all known holes.
All of these findings were reported by Abdi Pranata. Swift SMTP (formerly Welcome Email Editor) is installed on roughly 7,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2023-47756Welcome Email Editor <= 5.0.5 - Missing Authorization via ajax_handler
Read the full analysisVulnerability Records
Swift SMTP (formerly Welcome Email Editor)
Author
David Vongries
Swift SMTP is a free & simple SMTP Plugin for WordPress. Struggeling with emails not being delivered from your WordPress website? Look no further. 📤 Custom SMTP Settings Swift SMTP allows you to configure custom SMTP settings for your WordPress site, ensuring more reliable sending and delivery through your preferred service. Set “From” email address Set “From” name Define email content type (HTML or plain text) Set SMTP host Set up SMTP encryption & port (SSL or TSL) Set up SMTP authentification through username & password 💾 Email Logging (New!) Log all outgoing emails 📨 Customize WordPress Welcome Emails When a user is added to or signs up for a website, WordPress sends notifications to both the site administrator and the new user. This plugin allows you to customize & change those emails. Change email subject Change email content Add an attachment Change “Reply-To” email address & name & more 🔐 Change WordPress Reset Password Email Swift SMTP also lets you customize the default Forgot Password email in WordPress. Change email subject Change email content What’s next? If you like Swift SMTP, make sure to check out our other products: Ultimate Dashboard – The #1 WordPress plugin to customize your WordPress dashboard and admin area. Page Builder Framework – A fast & minimalistic WordPress theme designed for the new WordPress era. Better Admin Bar – The plugin to make your clients enjoy WordPress. It replaces the default admin bar to provide the best possible user experience when editing & navigating a website.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C