Plugin suddenly sending spam messages

Hi,

Sorry, but Post SMTP is not sending any spam messages.
The only thing that he does sent is notifications about failed emails.

Hey I have exactly the same issue. Really naughty messages are being sent out.

I use Gmail with the post SMTP plugin. I’ve reset all my mail passwords, cleared and reinstalled the post SMTP plugin (including setting up a new API) and I can’t think what else is causing them…

Any ideas?

Thanks digital, I am also still sure it is the plugin, since I created new and specific email addresses for it to test it and exactly those addresses filled in at the post smtp plugin are being used for this abuse.

ps. note that I don’t say post smtp is deliberately doing this, there must be a vulnerability in the plugin which has not been addressed yet, and somebody else is abusing.

Ok, I am really not sure that postsmtp is the culprit. So, I am closing this topic.

I would like this re-opened because this is still an issue… and I have other wordpress websites where I do not use this plugin and I do not have any issues of this sort.

Hi @leannedolce

Can you give me an example? Screenshot of the spam message?

hi ! same problem here, very annoying !

screenshot –> https://nimb.ws/vn3Urd

Hi @gigikreib,

Your site has probably been compromised. As @yehudah said before, all PostSMTP does is sends out notification emails, it cannot generate content in any way.

I would disable all your plugins except PostSMTP and see whether these spam emails stop being sent. If that’s the case, you know that one of your plugins must be compromised.

Judging by the amount of blurred notices on your screenshot you seem to have a lot of plugins (more than 20)?

Please let us know how you get on.

Kind Regards,
Tim

Hi, Tim.

The blurred areas are not spam messsages. Eeverything went fine until post SMTP was installed, so I′m not disabling all my other plugins. Not a chance that you recognize that your plugin has vulnerabilities and must be reviseted?

What a pity, and goodbye forever.

Hi @gigikreib,

Wow, I wasn’t expecting that reply! As you’re new to the www.remarpro.com forums, might I point you to the forum guidelines? I’d particularly like to quote:

Assume the best of people and try to make things better.

You’ll notice that I don’t have an orange ‘Plugin Author’ banner by name – it’s not my plugin. I am (as is the author) a volunteer who is trying to help you, we don’t get paid for this. The www.remarpro.com forums are totally free to use, so I think your being incredibly unfair with your message after just one reply – in less than 4 hours at that!

If you’d still like support, I am sure that I and the community would be happy to do that – but please be polite and respectful. Maybe the plugin does have a vulnerability, but I struggle to understand how with 200,000+ active installs only 3 people have reported this in this thread. That’s 0.0015% of users, in theory. For the type of plugin this is, such a vulnerability is unlikely.

Eeverything went fine until post SMTP was installed

Did you have a mail logging app that you used before Post SMTP to see what mail was being sent out? It would be genuinely interesting to know.

Perhaps you could also let us know what SMTP service you are using? It looks like others on this thread were using Gmail – are you?

I hope that we can still help you, but please be fair.

Kind Regards,
Tim