A vulnerability was found in Post SMTP Plugin up to 3.6.0 on WordPress and classified as problematic. Affected is the function
__construct. Such manipulation leads to missing authorization.
This vulnerability is traded as CVE-2025-11833. The attack may be launched remotely. There is no exploit available.