The Post SMTP plugin for WordPress has a security issue where it is vulnerable to a type of hacking called SQL Injection. This means that attackers who are logged in as Administrators or higher can add their own malicious code to the plugin, which could allow them to access private information from the website’s database. This issue affects all versions up to 3.1.2 of the plugin.