Note that after patching to the new version there is still a potential risk that the bad actor while logged into the site may have connected the POST SMTP mobile app to gain access to logs remotely. The plugin also appears to have a bug that doesn’t allow that mobile device connection to be disconnected in the admin database apparently.
-
This reply was modified 10 months ago by dkedinger.
-
This reply was modified 9 months, 4 weeks ago by Yui. Reason: removed other plugin reference