A vulnerability was found in Post SMTP Plugin up to 3.6.0 on WordPress and classified as problematic. Affected is the function __construct. Such manipulation leads to missing authorization.

This vulnerability is traded as CVE-2025-11833. The attack may be launched remotely. There is no exploit available.