9311 matches found
Path traversal
Auth. Path Traversal vulnerability in Easy WP SMTP plugin = 1.5.1 on WordPress...
Path traversal
Auth. Path Traversal vulnerability in Easy WP SMTP plugin = 1.5.1 at WordPress...
CVE-2022-42699 WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Remote Code Execution (RCE)
Auth. Remote Code Execution vulnerability in Easy WP SMTP plugin = 1.5.1 on WordPress...
CVE-2022-42699 WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Remote Code Execution (RCE)
Auth. Remote Code Execution vulnerability in Easy WP SMTP plugin = 1.5.1 on WordPress...
CVE-2022-42699
CVE-2022-42699 affects the WordPress Easy WP SMTP plugin (versions 1.5.1 and earlier). The vulnerability is authenticated remote code execution in the plugin’s auth component. CVE details indicate a network-exposed vector with low attack complexity, requiring low privileges and no user interactio...
CVE-2022-45829
CVE-2022-45829 affects the WordPress Easy WP SMTP plugin, specifically versions <= 1.5.1. The vulnerability is an authenticated path traversal in the plugin, allowing traversal to sensitive files. Several sources also note potential arbitrary file deletion as part of the impact for affected ve...
CVE-2022-45833
CVE-2022-45833 is an authenticated path traversal vulnerability in WordPress Easy WP SMTP plugin versions ≤ 1.5.1. The issue, documented across multiple sources, allows traversal of directories in affected installations; exact exploit details are not provided in the initial/dependent documents. R...
CVE-2022-45833 WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Directory Traversal
Auth. Path Traversal vulnerability in Easy WP SMTP plugin = 1.5.1 on WordPress...
PT-2022-27651 · WordPress · Easy Wp Smtp
Name of the Vulnerable Software and Affected Versions: Easy WP SMTP plugin versions 1.5.1 and earlier Description: The issue is related to an Authenticated Path Traversal vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or detail...
WordPress plugin Easy WP SMTP 路径遍历漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...
WordPress plugin Easy WP SMTP 代码注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code injection vulnerability exis...
WordPress plugin Easy WP SMTP 路径遍历漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...
CVE-2022-42699: Improper Control of Generation of Code
Auth. Remote Code Execution vulnerability in Easy WP SMTP plugin = 1.5.1 on WordPress...
CVE-2022-45829: Improper Limitation of a Pathname to a Restricted Directory
Auth. Path Traversal vulnerability in Easy WP SMTP plugin = 1.5.1 at WordPress...
CVE-2022-45833: Improper Limitation of a Pathname to a Restricted Directory
Auth. Path Traversal vulnerability in Easy WP SMTP plugin = 1.5.1 on WordPress...
PT-2022-27653 · WordPress · Easy Wp Smtp
Name of the Vulnerable Software and Affected Versions: Easy WP SMTP plugin versions 1.5.1 and earlier Description: The issue is related to an Authenticated Path Traversal vulnerability. This vulnerability affects the Easy WP SMTP plugin on WordPress. Recommendations: For Easy WP SMTP plugin...
Easy WP SMTP < 1.5.2 - Admin+ Arbitrary File Access
The plugin does not validate some user input used to generate paths, which could allow high privilege users such as admin to access arbitrary files even when they should not be able to, for example in multisite via a traversal attack...
Easy WP SMTP < 1.5.2 - Admin+ Arbitrary File Deletion
The plugin does not validate some user input used to generate paths, which could allow high privilege users such as admin to delete arbitrary files even when they should not be able to, for example in multisite via a traversal attack...
Easy WP SMTP < 1.5.2 - Admin+ RCE
The plugin could allow high privilege users such as admin to perform RCE even when they should not be able to for example in multisite setups...
WordPress Easy Digital Downloads plugin CSV Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A CSV injection vulnerabili...