CVE-2025-57992
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-09-22

Last updated on: 2026-04-23

Assigner: Patchstack

Description
Cross-Site Request Forgery (CSRF) vulnerability in InterServer Mail Baby SMTP mail-baby-smtp allows Cross Site Request Forgery.This issue affects Mail Baby SMTP: from n/a through <= 2.8.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-09-22
Last Modified
2026-04-23
Generated
2026-06-16
AI Q&A
2025-09-22
EPSS Evaluated
2026-06-14
NVD
CVE-2025-57992
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
interserver mail_baby_smtp *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-352 The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a Cross-Site Request Forgery (CSRF) issue in the WordPress Mail Baby SMTP Plugin versions up to 2.8. It allows an attacker to trick authenticated users with higher privileges into performing unauthorized actions on the site without their consent, potentially compromising site security. [1]

Impact Analysis

The vulnerability can lead to unauthorized actions being executed by privileged users without their knowledge, which may compromise the security of the site. Although the severity is considered low (CVSS score 4.3), it still poses a risk of broken access control and potential misuse of the affected system. [1]

Mitigation Strategies

Immediate steps to mitigate this vulnerability include removing and replacing the Mail Baby SMTP plugin, as no official fix or updated version is available. Applying a virtual patch (vPatch) from Patchstack can provide automatic protection even without an official patch. Deactivating the plugin alone does not eliminate the risk. Users should also consider alternative software and seek professional incident response if compromise is suspected. [1]

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-57992. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart