Home / Vulnerability Intelligence / CVE-2026-32519

CVE-2026-32519 - Vulnerability Analysis

CriticalCVSS: 9.0

Last Updated: March 26, 2026

Bit Apps Bit SMTP - Privilege Escalation

Published: March 25, 2026Updated: March 26, 2026Remote Exploitable

Overview

Bit Apps Bit SMTP <= 1.2.2 contains a privilege escalation caused by incorrect privilege assignment, letting attackers escalate their privileges, exploit requires no special conditions.

Severity & Score

Severity: Critical

CVSS Score: 9.0

Impact

Attackers can escalate their privileges, potentially gaining unauthorized access or control.

Mitigation

Update to the latest version beyond 1.2.2.

References

https://patchstack.com/database/Wordpress/Plugin/bit-smtp/vulnerability/wordpress-bit-smtp-plugin-1-2-2-broken-authentication-vulnerability?_s_id=cve

Related Resources

Vulnerability Intelligence Dashboard
Credential Scanner

Details

CVE ID: CVE-2026-32519
Severity: Critical
CVSS Score: 9.0
Type: broken_access_control
Status: new

CWE

CWE-266

CVSS Metrics

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H