CVE-2026-124267: WordPress Gmail SMTP plugin <= 1.2.3.23 - Broken Access Control vulnerability

Q: Which installations are affected?

The issue affects Noor Alam Gmail SMTP versions through 1.2.3.23. The available data does not identify a fixed version or provide configuration-specific exclusions.

Q: Does exploitation require an authenticated WordPress account or user interaction?

No. The supplied vector indicates network exploitation with low complexity, no privileges required, and no user interaction required.

Q: What is the expected impact if the vulnerability is exploited?

The vulnerability can result in high confidentiality impact. The provided severity vector indicates no integrity or availability impact.

Published Nov 13, 2026

Updated

Missing Authorization vulnerability in Noor Alam Gmail SMTP gmail-smtp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gmail SMTP: from n/a through 1.2.3.23.

Affected Software

1 affected component

Noor Alam Gmail SMTP<=1.2.3.23

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.2.3.24

Event History

Nov 13, 2026

CVE Published

via MITRE·03:08 PM

Data Sourced

via MITRE·03:08 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·03:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which installations are affected?

The issue affects Noor Alam Gmail SMTP versions through 1.2.3.23. The available data does not identify a fixed version or provide configuration-specific exclusions.

Does exploitation require an authenticated WordPress account or user interaction?

No. The supplied vector indicates network exploitation with low complexity, no privileges required, and no user interaction required.

What is the expected impact if the vulnerability is exploited?

The vulnerability can result in high confidentiality impact. The provided severity vector indicates no integrity or availability impact.

CVE-2026-124267: WordPress Gmail SMTP plugin <= 1.2.3.23 - Broken Access Control vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which installations are affected?

Does exploitation require an authenticated WordPress account or user interaction?

What is the expected impact if the vulnerability is exploited?

Company

Resources

Contact

Frequently Asked Questions

Which installations are affected?

Does exploitation require an authenticated WordPress account or user interaction?

What is the expected impact if the vulnerability is exploited?