CVE-2026-66606 WordPress SmartSMTP plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability
Published
HighCVSS 7.1
EPSS 0.25%
Unauthenticated Cross Site Scripting (XSS) in SmartSMTP <= 1.2.0 versions.