A vulnerability has been found in Post SMTP Plugin up to 3.6.1 on WordPress and classified as problematic. This affects the function
handle_gmail_oauth_redirect. Performing manipulation results in missing authorization.
This vulnerability is known as CVE-2025-12887. Remote exploitation of the attack is possible. No exploit is available.