It’s common practice to use website plugins to send emails for various purposes, such as contact forms or order placement. A plugin is a software extension that adds new features or extends functionality on an existing application.
Unfortunately, even some of the most well-known email plugins are susceptible to multiple vulnerabilities or risks.
The following articles explain the details of some of the known vulnerabilities:
Some website plugins used to send emails using your SMTP username and password might carry some known vulnerabilities.
You must start by running a thorough scan of your website codebase. If you’re using a Content Management System, check each plugin (especially the plugin configured on user SMTP credentials), and remove the vulnerable plugin. In the absence of any identified issues with the plugins, it is recommended to deactivate the one utilizing SMTP credentials for increased security.
Here are a few recommendations for website scanners for WordPress with which you can scan your website:
It is important to address the vulnerability before resetting your password, as failure to do so could result in the compromise of the new password.
Once you have secured your website, there are 3 things you can do to tighten security of your Titan mailbox:
- Reset password and set up a very strong password.
- Set up DKIM record
- Use Two-Factor Authentication (Enabling 2FA will disable the SMTP connection on the website)
We hope this was helpful. In case of any queries, do feel free to reach out to us at support@titan.email.
Additional resources:
You can also take a look at the following YouTube videos to understand how to secure your WordPress website/plugins from hackers.