A popular plugin for WordPress called Post SMTP, which helps with sending emails and keeping track of them, has a security issue. This means that unauthorized users could potentially access sensitive information, like password reset details, and take over any user’s account, even administrators.